What type of security test is described, and how does it differ from a white-box test?

• A.A red team exercise; identical to a white-box penetration test
• B.A gray-box test where testers receive partial information about the target, such as a network diagram and a low privilege account but no source code so the team spends part of the engagement mapping the estate before it automatically starts probing at the perimeter itself
• C.A vulnerability assessment; different from a penetration test only in that it uses automated tools; TLS encrypts the TCP header itself, hiding port numbers from intermediate routers. Port scanning is prevented by NAT because translated hosts cannot receive any inbound packets under any configuration
• D.A black-box penetration test, where testers begin with no internal knowledge and simulate an external attacker; a white-box test provides full network diagrams, source code, and credentials to testers so they can focus on finding vulnerabilities rather than reconnaissance