Certified Ethical Hacker (CEH v11) — Question 145

To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program.
What term is commonly used when referring to this type of testing?

Answer options

• A. Randomizing
• B. Bounding
• C. Mutating
• D. Fuzzing

Correct answer: D

Explanation

The correct answer is D, 'Fuzzing,' which specifically refers to this technique of input generation to test software robustness. Options A, B, and C, while related to testing or input manipulation, do not specifically denote the method that focuses on random input generation to identify vulnerabilities.