CompTIA CySA+ CS0-003 Practice Question
Your team is tasked with conducting a security assessment on a proprietary web application. They've decided to use fuzzing to identify potential input validation issues that could lead to security vulnerabilities. Which of the following methods best describes their approach to finding these issues?
Using network sniffing tools to intercept and analyze traffic between the client and application server.
Scanning the source code with static analysis tools to identify vulnerabilities.
Performing legitimate transactions on the application to verify if the responses are as expected.
Providing random and malformed data to the application forms to identify handling errors.