Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Softwares and Software Security

A fintech firm's developers test a web application by feeding it deliberately malformed and random inputs to see whether it crashes or exposes vulnerabilities, without examining the source code. Which security testing technique is this?

The technique is fuzz testing. It feeds malformed or random inputs to a running application and watches for crashes or unexpected behaviour, without needing source code. Static analysis examines code without running it, so it does not fit the scenario.

  1. AFuzz testingCorrect
  2. BStatic code analysis
  3. CCode obfuscation
  4. DRegression testing

Explanation

Fuzz testing sends invalid, unexpected or random data to a running program to trigger crashes and expose flaws, treating it as a black box. Static code analysis, by contrast, examines source code without executing it. Obfuscation hides code logic and regression testing checks that changes do not break existing functions.

Did you get it right without looking?

One question tells you little. A timed set on Softwares and Software Security shows your real accuracy, how long you take and where you lose marks.

Practise Softwares and Software SecurityFree diagnostic mock

More Softwares and Software Security questions