You've been hired as part of a pen test team. During the in brief, you learn the client wants the pen test attack to simulate a normal user who finds ways to elevate privileges and create attacks. Which test type does the client want?
a. Black-box testing
b. Gray-box testing
c. White-box testing
d. Social engineering