Official (Isc)² Csslp - Domain 5: Secure Software Testing
Attack surface validation CORRECT ANSWER Determining if the software has exploitable weakness (attack surface). Black box test CORRECT ANSWER Usually described as focusing on testing functional requirements. Functional testing CORRECT ANSWER Software testing is performed primarily to attest to the functionality of the software as expected by the business or customer. Fuzz testing CORRECT ANSWER A software testing technique, often automated or semi- automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. Load testing CORRECT ANSWER Usually defined as the process of exercising the system under test by feeding it the largest tasks it can operate with. Penetration test (pen test) CORRECT ANSWER A validation and verification measure that is an evaluation of a software or network's current state of security Pseudo Random Number Generator (PRNG) CORRECT ANSWER A deterministic algorithm to generate a sequence of numbers with little or no discernible pattern in the numbers, except for broad statistical properties.
Document information
- Uploaded on
- January 5, 2023
- Number of pages
- 2
- Written in
- 2022/2023
- Type
- Exam (elaborations)
- Contains
- Questions & answers
