Which type of testing involves delivering malformed inputs to an application and observing its responses?

Which type of testing involves delivering malformed inputs to an application and observing its responses?

• A. Vulnerability scanning
• B. Social engineering
• C. Penetration testing
• D. Fuzz testing

Answer: (D)

Fuzz testing centers on input handling by bombarding the application with malformed or random data and watching how it behaves. This approach helps uncover robustness and security issues such as parsing errors, crashes, hangs, memory corruption, or validation gaps that normal tests might miss. It’s different from vulnerability scanning, which looks for known vulnerabilities using signatures; social engineering, which targets people rather than the software; and penetration testing, which is a broader simulating attacker approach—fuzzing is a specific technique used to stress how an app handles unexpected inputs.

Fuzz testing centers on input handling by bombarding the application with malformed or random data and watching how it behaves. This approach helps uncover robustness and security issues such as parsing errors, crashes, hangs, memory corruption, or validation gaps that normal tests might miss. It’s different from vulnerability scanning, which looks for known vulnerabilities using signatures; social engineering, which targets people rather than the software; and penetration testing, which is a broader simulating attacker approach—fuzzing is a specific technique used to stress how an app handles unexpected inputs.