API GraphQL & SOAP Testing 2

Question 1

What is a WSDL file used for in SOAP web services?

Accepted Answer

Describe the SOAP service's operations, messages, and endpoint location in XML

Answer

WSDL (Web Services Description Language) is an XML document that describes what operations a SOAP service offers, their inputs/outputs, and where to call them.

Question 2

What is the GraphQL introspection query used for?

Accepted Answer

Query the schema to discover available types, fields, and operations

Answer

Introspection allows clients to query the GraphQL server's own schema meta-information, enabling tools to auto-generate documentation and queries.

Question 3

What is the 'N+1 query problem' in GraphQL testing?

Accepted Answer

Fetching a list then making N additional queries for each item's related data

Answer

The N+1 problem occurs when a GraphQL resolver fetches a list (1 query) then makes a separate database call for each item (N queries), severely hurting performance.

Question 4

What is a GraphQL 'subscription' used for?

Accepted Answer

Receiving real-time data push updates from the server over WebSocket

Answer

GraphQL subscriptions use WebSocket connections to push real-time updates from the server to the client when data changes occur.

Question 5

What security concern should testers check when introspection is enabled on a production GraphQL API?

Accepted Answer

Exposing the full schema to attackers, revealing sensitive types and mutations

Answer

Enabled introspection in production lets attackers map the entire API schema, discovering sensitive fields and operations to target.

API - Testing Practice Test

API - Testing Practice Test

API GraphQL & SOAP Testing 2