CSSLP · Question #366
Which of the following items would not normally be classified as a security test case?
The correct answer is B. Stakeholder communication. Security test cases are designed to identify vulnerabilities and assess the effectiveness of security controls within a system, whereas stakeholder communication is an organizational process. The other options, while not exclusively security-focused, can incorporate security aspe
Question
Which of the following items would not normally be classified as a security test case?
Options
- APerformance and usability testing
- BStakeholder communication
- CFunctional testing
- DUser interface testing
How the community answered
(30 responses)- B93% (28)
- C3% (1)
- D3% (1)
Why each option
Security test cases are designed to identify vulnerabilities and assess the effectiveness of security controls within a system, whereas stakeholder communication is an organizational process. The other options, while not exclusively security-focused, can incorporate security aspects or are forms of system testing.
Performance and usability testing can have security implications, such as testing system behavior under load to prevent denial of service or evaluating the user-friendliness of security features.
Stakeholder communication is a project management and organizational activity focused on engaging and informing stakeholders, and it is not a technical test case executed against software to evaluate its security.
Functional testing ensures the software performs its intended functions correctly, and these functions can include security-specific features like authentication or authorization.
User interface testing can include assessing how security elements are presented to the user, how error messages related to security are displayed, or how security configurations are managed through the UI.
Concept tested: Security testing scope
Topics
Community Discussion
No community discussion yet for this question.