QuestionQ12

Security Test Techniques

Which of the following is an example of a security test at the component-test level?

  • A Access control testing, which verifies that users can only access data and functionalities appropriate to their roles and permissions.
  • B Verifying that a component correctly interacts with the database to handle potentially malicious input safely.
  • C Verifying that a method correctly handles potentially malicious input by using parameterized queries to prevent SQL injection.
  • D A penetration test that simulates real-world attacks to identify vulnerabilities in the system’s defenses.
Explanation

A component-level security test evaluates the secure behavior of an individual unit of code. Verifying that a method uses parameterized queries to safely handle malicious input directly tests that component's protection against SQL injection.

Community Discussion

No comments yet. Be the first to start the discussion!