A development team is launching a new public-facing web product. The Chief Information Security Officer has asked that the product be protected from attackers who use malformed or invalid inputs to destabilize the system. Which of the following practices should the development team implement?
Choose an answer
Tap an option to check your answer.
Correct answer: Fuzzing.
Why this is the answer
Fuzzing is a software testing technique that involves providing invalid, unexpected, or random data as inputs to a computer program to expose software bugs and security vulnerabilities. This directly addresses the CISO's concern about malformed or invalid inputs destabilizing the system. Continuous deployment focuses on automating software releases, not directly on input validation. Static code analysis examines source code without executing it to find potential errors, but it might not catch all runtime vulnerabilities related to unexpected inputs. Manual peer review involves human examination of code, which is valuable but less efficient and comprehensive than fuzzing for identifying vulnerabilities from a vast range of malformed inputs.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed