What term is used for security testing of shrink-wrapped software in a lab?

• A. Shrink-wrapped software test
• B. Penetration test
• C. Social engineering test
• D. Compliance audit

Answer: (A)

Testing shrink-wrapped software in a lab refers to evaluating the security of commercial off-the-shelf software without access to its source code, using a controlled, lab environment to see how the product behaves from an external user perspective. This term is the best fit because it tightens the scope to off-the-shelf software evaluated in a lab, exactly as end users would encounter it, rather than focusing on the broader activities of breaking into systems or testing people or policies. A penetration test is a broader activity aimed at finding exploitable weaknesses in systems, networks, or applications and isn’t limited to shrink-wrapped software in a controlled lab. A social engineering test targets human factors, not the software itself. A compliance audit assesses adherence to standards and policies, not the security of a specific piece of software in a lab.