Fuzzing is a security assessment technique that allows testers to analyze the behavior of software applications under which of the following conditions?

Fuzzing deliberately supplies unexpected, random, or malformed data to application inputs to observe how the software responds to edge cases and invalid conditions. This technique discovers security vulnerabilities such as buffer overflows, input validation flaws, and unhandled exceptions that might not surface during normal functional testing.

Fuzzing evaluates software behavior based on what is supplied as input and output is the observed result being analyzed, not the test condition being applied.

Parameterized input uses structured, expected values and is associated with normal functional testing or parameterized database queries, which is the opposite of fuzzing.

Valid output is the result of correct processing and is not a condition under which fuzzing operates, as fuzzing specifically aims to provoke abnormal or error output.