An application security analyst needs to test a web application for input validation vulnerabilities. The analyst does not have the source code and does not have documentation for the APIs. Which of…

The correct answer is A. Fuzzing operation. Fuzzing is the most effective technique when source code and API documentation are unavailable. By sending large volumes of unexpected, random, or malformed inputs to the web application, the analyst can uncover input validation flaws based solely on observed behavior.

Submitted by carter_n· Mar 6, 2026Vulnerability Management

Question

An application security analyst needs to test a web application for input validation vulnerabilities. The analyst does not have the source code and does not have documentation for the APIs. Which of the following techniques will best aid the analyst in vulnerability testing?

Options

AFuzzing operation
BAgentless scanning
CReverse engineering
DUse of a SAST tool

How the community answered

(47 responses)

A
70% (33)
B
17% (8)
C
4% (2)
D
9% (4)

Explanation

Fuzzing is the most effective technique when source code and API documentation are unavailable. By sending large volumes of unexpected, random, or malformed inputs to the web application, the analyst can uncover input validation flaws based solely on observed behavior.

Topics

#fuzzing#input validation#application security testing#vulnerability testing

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice