Software Security Testing Worksheet

What is the primary focus of software security testing?

• To identify bugs in the software

• To assess the security vulnerabilities in the software

• To check if the software meets functional requirements

• To evaluate the user interface of the software

How does software security testing differ from traditional software testing?

• Software security testing focuses on functional requirements

• Software security testing identifies vulnerabilities and risks

• Software security testing tests user interfaces

• Software security testing is not a part of the SDLC

Which of the following is an example of functional testing?

• Verifying that a login page is vulnerable to SQL injection

• Checking if the login page functions correctly when valid credentials are entered

• Testing the performance of the software under heavy load

• Verifying that a web application’s data is encrypted

Risk-based testing is primarily used to:

• Identify the functional requirements of the software

• Determine the likelihood and impact of security threats

• Test the software’s performance

• Test the software’s user interface

What is the goal of penetration testing?

• To verify the software’s functionality

• To find performance bottlenecks in the software

• To exploit vulnerabilities in the system and gain unauthorized access

• To validate the software’s compliance with regulations

When should security testing be performed during the SDLC (Software Development Life Cycle)?

• Only after the software has been deployed

• Only during the testing phase

• Throughout the SDLC to ensure continuous security

• Only during the maintenance phase

What is unit testing?

• Testing individual components or functions in isolation

• Testing the entire system as a whole

• Testing the security of the system

• Testing how different modules integrate

Which of the following is a popular testing library used for unit testing in software development?

• JUnit

• Jenkins

• Hadoop

• AngularJS

What is the purpose of testing executable files in security testing?

• To check the functional behavior of the software

• To verify that no malicious code is embedded within the executable

• To analyze the user interface of the executable

• To check for performance issues

Which testing level ensures that multiple components work together?

• Unit testing

• Integration testing

• System testing

• Functional testing