A security administrator wants to test the reliability of an application which accepts user provided parameters. The administrator is concerned with data integrity and availability. Which of the…

Secure coding refers to development best practices for writing robust and safe code, not a testing technique used to actively probe a running application with unexpected inputs.

Fuzzing is the appropriate technique for testing how an application handles unexpected or malformed user-provided parameters, directly addressing concerns about data integrity (whether bad input corrupts data) and availability (whether bad input crashes the application). By automatically generating and submitting large volumes of random or boundary-case inputs, fuzzing reveals vulnerabilities that could be exploited to disrupt service or corrupt data.

Exception handling is a mechanism built into application code to gracefully manage errors at runtime, not a testing approach for evaluating how the application responds to malformed parameters.

Input validation is a preventive control that checks and sanitizes user input before processing, not a reliability testing technique for evaluating application behavior under unexpected or adversarial input.