Question

A security analyst is testing to find SQL injection vulnerabilities. She uses automation of a large volume of random data inserted into the web application's input fields in order to check the output.

Which type of testing was done?

answer

Static testing


Fuzz testing


Dynamic testing


Function testing

Answer 1

Fuzz testing

Rationale: She automated sending large volumes of random/malformed input to the running application and observed outputs—this is fuzzing (a form of dynamic testing used to find input-handling flaws like SQL injection).