Yes that's good practice. But you need to know programming to do white box testing