Exam 10: Testing for Quality and Security

Testing software consists of running a battery of test cases using multiple techniques against a specific use case and evaluating the results for pass or fail marks.

Static testing involves executing methods and techniques to test the code while running the application.

Unit testing is the lowest level of testing a developer can conduct.

It is better to use programmers for general testing because they are familiar with the architecture and code.

Reliability testing is a technique that feeds random input data into applications just to see what happens to the results.

When testing for resiliency, what is being evaluated?

The more complexity that is added to the system, the more secure it becomes.

Source-based fault injections is when you go into the source code and force an error or an attack non-manually.

What is a simulation tool used for?

Making something bad happen actually tests the dependencies and resiliency of the software.

What test is when two or more modules or platforms are linked together and tested?

What type of test involves a complete front-to-back execution of the entire application?

What type of resources are tools or people who are hired on a temporary basis to come into a project, test the application, and report findings?

Security code scanners also report a number of false positives.

Use cases are a great starting point for functional test scripts.

Manually going into the source code and forcing an error or attack is called?

Who creates and approves the test plan?

What type of errors does unit testing find?

The application will never be 100% secure.

What type of testing implies executing the current use case using valid inputs and then comparing the real results with expected results for pass or failures