Testing Flashcards

A CRM security tester attempts to access another user's contact records by manipulating the record ID in the URL. This attack is called:

Answer: Insecure direct object reference

Insecure direct object reference (IDOR) occurs when an application exposes internal object identifiers without proper authorization checks.

In CRM performance testing, 'think time' refers to:

Answer: The simulated pause between user actions to mimic real user behavior

Think time simulates the realistic pauses users take between interactions, producing more accurate load test results.

A tester runs the same set of CRM test cases repeatedly without adding new ones. Over time, fewer bugs are found. This is called the:

Answer: Pesticide paradox

The pesticide paradox describes how repeated use of the same tests makes them less effective at finding new defects over time.

Which approach should a CRM testing team use to prioritize test cases when time is limited?

Answer: Risk-based testing focused on high-impact, high-probability failures

Risk-based testing allocates limited time to areas where failures are most likely and would have the greatest business impact.

What is the purpose of a 'test environment' in CRM testing?

Answer: An isolated system that mirrors production for safe testing without affecting live data

A test environment is a controlled replica of the production system where testing can occur without risking real customer data or operations.

During CRM API testing, a tester sends a POST request to create a contact with a missing required field. The expected response code is:

Answer: 400 Bad Request

A 400 Bad Request response indicates the server could not process the request due to invalid or missing input data.

A CRM test case fails only in Internet Explorer but passes in Chrome and Firefox. This indicates a need for:

Answer: Compatibility testing

Compatibility testing verifies that software works correctly across different browsers, operating systems, and devices.