A. OWASP is for web applications and OSSTMM does not include web applications.
B. OSSTMM is gray box testing and OWASP is black box testing.
C. OWASP addresses controls and OSSTMM does not.
D. OSSTMM addresses controls and OWASP does not.
Scroll down for answer
The following books are highly recommended to progress your CEH v10 studies.
CEH v10 EC Council questions and answers.
FREE PDF Download of all CEH v10 exam questions and answers.