Fault Attack Testing Flashcard

Front

What is the correct expected result of entering in a comment box or input field?

Back

The system should sanitize user inputs and prevent scripts from executing.

Answer explanation

The system should sanitize user inputs to remove or neutralize potentially harmful content like script tags. This prevents Cross-Site Scripting (XSS) attacks, which can compromise user data and system security. Executing scripts from user input is a major security risk and must be prevented.

Front

Scenario: Load Testing – Simulating 1,000 concurrent users logging in at the same time.
Question: What is the correct expected result?

Back

The system should handle the load without crashing or significantly slowing down.

Answer explanation

The purpose of load testing is to ensure the system can handle high traffic under stress. A properly optimized and scalable system should maintain performance and stability even when 1,000 users attempt to log in at the same time. Crashing or slowing down indicates a failure to meet performance requirements.

Front

Scenario: Stress Testing – Repeatedly sending large data to a server to see if it becomes unresponsive.
Question: What is the correct expected result?

Back

The system should mitigate excessive requests and prevent service disruption.

Answer explanation

Stress testing helps identify how a system behaves under extreme conditions. A robust system should detect and manage unusually high traffic—such as large, repeated data requests—without crashing or becoming unresponsive. This includes throttling, rate limiting, or rejecting abusive traffic to maintain overall availability and performance.

Front

Entering -99999 in an age field to test negative number handling. What is the correct expected result?

Back

The system should restrict input to valid age ranges.

Answer explanation

Age fields should only accept realistic, non-negative values within a defined range. Allowing negative numbers is a data validation flaw that could lead to system errors or incorrect data handling. Proper input validation helps maintain data integrity and prevents invalid or nonsensical entries.

Front

How many Test Cases can be derived from this classification Tree?

Back

5

Answer explanation

We can create a total of five test cases from the given classification tree.