Which of the following security testing techniques is MOST effective for confirming that inputs to a web application have been properly sanitized?

The correct answer is C. Fuzzing. Fuzzing feeds a wide variety of malformed, unexpected, and random inputs into the application, including special characters and payloads, to exercise all input - handling routines. This approach reliably uncovers cases where input sanitization is missing or inadequate.

Submitted by fatima_kr· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Options

ABrute force
BSQL injection
CFuzzing
DPassword spraying

How the community answered

(31 responses)

A
3% (1)
B
6% (2)
C
90% (28)

Explanation

Fuzzing feeds a wide variety of malformed, unexpected, and random inputs into the application, including special characters and payloads, to exercise all input - handling routines. This approach reliably uncovers cases where input sanitization is missing or inadequate.

Topics

#Security Testing Techniques#Input Sanitization#Fuzzing#Web Application Security

Community Discussion

No community discussion yet for this question.

Full CISA Practice