ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

Stress testing is a nonfunctional security testing technique that intentionally pushes a system beyond its expected operational capacity-such as overloading the database-to observe how security mechanisms behave when resources are scarce or performance is degraded. By doing so, testers can confirm whether authentication and authorization controls remain reliable during extreme load. Unit tests focus on isolated code paths, dynamic scanners look for vulnerability classes in normal operating states, and acceptance tests verify business requirements but do not systematically exhaust resources to assess reliability.