nerdexam
EC-Council

312-50V9 · Question #387

A software tester is randomly generating invalid inputs in an attempt to crash the program. Which of the following is a software testing technique used to determine if a software program properly…

The correct answer is C. Fuzzing. Fuzzing is a dynamic software testing technique that automatically feeds random, malformed, or unexpected inputs to a program to discover crashes, vulnerabilities, or unexpected behavior.

Vulnerability Analysis

Question

A software tester is randomly generating invalid inputs in an attempt to crash the program. Which of the following is a software testing technique used to determine if a software program properly handles a wide range of invalid input?

Options

  • AMutating
  • BRandomizing
  • CFuzzing
  • DBounding

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    90% (26)
  • D
    3% (1)

Why each option

Fuzzing is a dynamic software testing technique that automatically feeds random, malformed, or unexpected inputs to a program to discover crashes, vulnerabilities, or unexpected behavior.

AMutating

Mutating refers to mutation testing, which alters source code to evaluate test suite effectiveness, not a technique for feeding invalid inputs to a running program.

BRandomizing

Randomizing is a generic term for introducing randomness and is not a recognized software testing methodology for invalid input handling.

CFuzzingCorrect

Fuzzing (or fuzz testing) is the specific technique of bombarding a program with large volumes of random, invalid, or unexpected data to identify how it handles edge cases and whether it crashes or exposes vulnerabilities. It is widely used in security testing to find input validation flaws and memory corruption bugs. Tools like AFL and libFuzzer automate this process against real program execution.

DBounding

Bounding refers to boundary value analysis, which tests values at the edges of valid input ranges rather than broadly generating invalid or malformed inputs.

Concept tested: Fuzz testing for invalid input handling

Source: https://owasp.org/www-community/Fuzzing

Topics

#fuzzing#software testing#invalid input#vulnerability testing

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice