CSE 110 EVALUATION 2026 EXAM TEST
QUESTIONS AND ANSWERS SURE A+
✔✔TDD Benefit - ✔✔Encourages clearer design, better verification, and safer
refactoring.
✔✔TDD Cost - ✔✔Can be slow and requires skill to apply well.
✔✔Test Near Code - ✔✔Writing tests immediately after code before moving on.
✔✔Test Close to Code - ✔✔Another name for writing tests right near the
implementation step.
✔✔AI Code Testing Need - ✔✔AI-generated code should be tested because
correctness is not guaranteed.
✔✔BDD - ✔✔Behavior Driven Development; testing based on user behavior and
expected outcomes.
✔✔BDD Benefit - ✔✔Keeps testing connected to user stories and user-centered
thinking.
, ✔✔BDD Example - ✔✔Given I am editing a meme, when I click download, then the final
meme includes my text.
✔✔Given-When-Then - ✔✔A BDD structure for describing behavior scenarios.
✔✔TDD vs BDD - ✔✔TDD focuses on code behavior; BDD focuses more directly on
user/system behavior.
✔✔Security Testing - ✔✔Testing that software resists misuse, hostile input, and
unauthorized behavior.
✔✔Golden Rule of Web Security - ✔✔Trust no user input and no resulting output.
✔✔Trust No Data - ✔✔Assume all input may be incorrect, malicious, or unexpected.
✔✔Unexpected Field Count - ✔✔If an endpoint expects 3 values and receives more or
fewer, that is suspicious.
✔✔Wrong Type Input - ✔✔If a number field receives a string, that is suspicious.
✔✔Expired Cookie Suspicion - ✔✔A cookie appearing after it should expire may
indicate tampering or misuse.
✔✔Many 404s From IP - ✔✔Repeated missing-page requests from one IP may indicate
scanning or attack behavior.
✔✔STRIDE - ✔✔A security threat model: Spoofing, Tampering, Repudiation,
Information Disclosure, Denial of Service, Elevation of Privilege.
✔✔Navigation Timing API - ✔✔Web API useful for measuring real user performance
timing.
✔✔Window Error Event - ✔✔Browser event useful for capturing JavaScript errors.
✔✔Console Capture - ✔✔Collecting user console information to diagnose problems.
✔✔Session Replay - ✔✔Recording user interactions to replay a session, useful but
privacy-sensitive.
✔✔Crash Dump - ✔✔A file or record produced when software crashes, useful for
diagnosis.
✔✔Monitor the Full Stack - ✔✔Observe frontend and backend together because a
frontend symptom may come from a backend problem.
QUESTIONS AND ANSWERS SURE A+
✔✔TDD Benefit - ✔✔Encourages clearer design, better verification, and safer
refactoring.
✔✔TDD Cost - ✔✔Can be slow and requires skill to apply well.
✔✔Test Near Code - ✔✔Writing tests immediately after code before moving on.
✔✔Test Close to Code - ✔✔Another name for writing tests right near the
implementation step.
✔✔AI Code Testing Need - ✔✔AI-generated code should be tested because
correctness is not guaranteed.
✔✔BDD - ✔✔Behavior Driven Development; testing based on user behavior and
expected outcomes.
✔✔BDD Benefit - ✔✔Keeps testing connected to user stories and user-centered
thinking.
, ✔✔BDD Example - ✔✔Given I am editing a meme, when I click download, then the final
meme includes my text.
✔✔Given-When-Then - ✔✔A BDD structure for describing behavior scenarios.
✔✔TDD vs BDD - ✔✔TDD focuses on code behavior; BDD focuses more directly on
user/system behavior.
✔✔Security Testing - ✔✔Testing that software resists misuse, hostile input, and
unauthorized behavior.
✔✔Golden Rule of Web Security - ✔✔Trust no user input and no resulting output.
✔✔Trust No Data - ✔✔Assume all input may be incorrect, malicious, or unexpected.
✔✔Unexpected Field Count - ✔✔If an endpoint expects 3 values and receives more or
fewer, that is suspicious.
✔✔Wrong Type Input - ✔✔If a number field receives a string, that is suspicious.
✔✔Expired Cookie Suspicion - ✔✔A cookie appearing after it should expire may
indicate tampering or misuse.
✔✔Many 404s From IP - ✔✔Repeated missing-page requests from one IP may indicate
scanning or attack behavior.
✔✔STRIDE - ✔✔A security threat model: Spoofing, Tampering, Repudiation,
Information Disclosure, Denial of Service, Elevation of Privilege.
✔✔Navigation Timing API - ✔✔Web API useful for measuring real user performance
timing.
✔✔Window Error Event - ✔✔Browser event useful for capturing JavaScript errors.
✔✔Console Capture - ✔✔Collecting user console information to diagnose problems.
✔✔Session Replay - ✔✔Recording user interactions to replay a session, useful but
privacy-sensitive.
✔✔Crash Dump - ✔✔A file or record produced when software crashes, useful for
diagnosis.
✔✔Monitor the Full Stack - ✔✔Observe frontend and backend together because a
frontend symptom may come from a backend problem.
