CAS-002 · Question #446
Which of the following is an automated software testing technique that involves providing invalid, unexpected, or random data to the inputs of a computer program?
The correct answer is D. Fuzzing. The programs and frameworks that are used to create fuzz tests or perform fuzz testing are called fuzzers. Fuzzing has evolved from a niche technique into a full testing discipline with support from both the security research and traditional QA testing communities. Fuzzing…
Question
Which of the following is an automated software testing technique that involves providing invalid, unexpected, or random data to the inputs of a computer program?
Options
- AGray box testing
- BWhite box testing
- CBlack box testing
- DFuzzing
How the community answered
(43 responses)- A2% (1)
- B7% (3)
- C2% (1)
- D88% (38)
Explanation
The programs and frameworks that are used to create fuzz tests or perform fuzz testing are called fuzzers. Fuzzing has evolved from a niche technique into a full testing discipline with support from both the security research and traditional QA testing communities. Fuzzing (Fuzz testing) is an automated software testing technique that involves providing invalid, unexpected, or random data to the inputs of a computer program. The program is then monitored for exceptions such as crashes or failing built-in code assertions. Fuzzing is commonly used to test for security problems in software or computer systems. Answer option C is incorrect. Black box testing is also known as specification-based testing. It ignores the internal logic of an application. It refers to test activities using specification-based testing methods to discover errors in an application. The test activities are based on requirements and specifications of the application. It focuses on the following errors: - Specification-based function errors - Specification-based component/system behavior errors - Specification-based performance errors - User-oriented usage errors - Black box interface errors Answer option B is incorrect. White box testing, also known as Clear box or Glass box testing, takes into account the internal mechanism of a system or application. The connotations of "Clear box" and "Glass box" indicate that a tester has full visibility of the internal workings of the system. It uses knowledge of the internal structure of an application. It is applicable at the unit, integration, and system levels of the software testing process. It consists of the following testing methods: Control flow-based testing - Create a graph from source code. - Describe the flow of control through the control flow graph. - Design test cases to cover certain elements of the graph. Data flow-based testing - Test connections between variable definitions. - Check variation of the control flow graph. - Set DEF (n) contains variables that are defined at node n. - Set USE (n) are variables that are read. Answer option A is incorrect. Gray box testing is a combination of black box and white box testing. It is non-intrusive and impartial, as it does not require that a tester have access to the source code. It treats a system as a black box in the sense that it must be analyzed from the outside. Basically, it is used to find out defects related to bad design or bad implementation of the system. This type of testing is more commonly used with Web applications, as the Internet has a pretty stable interface.
Topics
Community Discussion
No community discussion yet for this question.