CompTIA Security+ (SY0-701) SY0-701 — Question 421

An organization wants a third-party vendor to do a penetration test that targets a specific device. The organization has provided basic information about the device. Which of the following best describes this kind of penetration test?