nerdexam
GAQM

CPEH-001 · Question #57

To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program. What…

The correct answer is D. Fuzzing. Fuzz testing or fuzzing is a software testing technique, often automated or semi-automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. The program is then monitored for exceptions such as crashes, or failing built-in code…

Vulnerability Assessment and Management

Question

To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program. What term is commonly used when referring to this type of testing?

Options

  • ARandomizing
  • BBounding
  • CMutating
  • DFuzzing

How the community answered

(64 responses)
  • A
    13% (8)
  • B
    3% (2)
  • C
    6% (4)
  • D
    78% (50)

Explanation

Fuzz testing or fuzzing is a software testing technique, often automated or semi-automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. The program is then monitored for exceptions such as crashes, or failing built-in code assertions or for finding potential memory leaks. Fuzzing is commonly used to test for security problems in software or computer systems. It is a form of random testing which has been used for testing hardware or software. https://en.wikipedia.org/wiki/Fuzz_testing

Topics

#fuzzing#automated testing#input validation#crash testing

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice