CISSP: Certified Information Systems Security Professional

Question

Before a web application is allowed into the production environment, the security practitioner performs multiple test types to confirm the application functions as expected. To test the username field, the practitioner creates a test that enters more characters than the field permits. Which of the following BEST describes the type of test performed?

Explanation

Misuse case testing intentionally supplies invalid, unexpected, or disallowed input to verify that the application properly enforces constraints and handles improper use. Supplying a username longer than the permitted field length is such a negative-input test.

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ236

Community Discussion