A software assurance lab is performing a dynamic assessment on an application by automatically generating and inputting different, random data sets to attempt to cause an error/failure condition. Which of the following software assessment capabilities is the lab performing AND during which phase of the SDLC should this occur? (Select two.)
A. Fuzzing
B. Behavior modeling
C. Static code analysis
D. Prototyping phase
E. Requirements phase
F. Planning phase
CS0-002: CompTIA CySA+ ExamFULL Printable PDF and Software. VALID exam to help you PASS. |
 |
We should give 2: assessment method and phase during which assessment takes place.
For Assessment >> A – Fuzzing is the described method of using random data as input
For Phase >> D – Prototyping method used in RAD (Rapid Application Development). Planning and requirements phases are not phases during which software is tested.
Correct answer should be AD since the question even mentions “A software assurance lab is performing a dynamic assessment”.