CAS-001 · Question #7
As part of the testing phase in the SDLC, a software developer wants to verify that an application is properly handling user error exceptions. Which of the following is the BEST tool or process for…
The correct answer is B. Fuzzer. A fuzzer (B) is the best tool for testing how an application handles unexpected or malformed inputs. Fuzzers automatically generate large volumes of invalid, boundary-case, or random data and feed it to the application, observing how it responds to inputs that trigger error…
Question
As part of the testing phase in the SDLC, a software developer wants to verify that an application is properly handling user error exceptions. Which of the following is the BEST tool or process for the developer use?
Options
- ASRTM review
- BFuzzer
- CVulnerability assessment
- DHTTP interceptor
How the community answered
(37 responses)- A3% (1)
- B92% (34)
- C5% (2)
Explanation
A fuzzer (B) is the best tool for testing how an application handles unexpected or malformed inputs. Fuzzers automatically generate large volumes of invalid, boundary-case, or random data and feed it to the application, observing how it responds to inputs that trigger error conditions. This directly tests whether exception handling logic is robust or whether the application crashes, exposes stack traces, or behaves unpredictably. An SRTM review (A) is a documentation-level traceability exercise, not a dynamic testing tool. A vulnerability assessment (C) is broader in scope and not specifically focused on error handling. An HTTP interceptor (D) is useful for inspecting and modifying web traffic but is not designed to automate error condition testing at scale.
Topics
Community Discussion
No community discussion yet for this question.