CRM Testing 4 — Questions and Answers
Question 1: A CRM security tester attempts to access another user's contact records by manipulating the record ID in the URL. This attack is called:
- SQL injection
- Cross-site scripting
- Insecure direct object reference (Correct answer)
- Broken authentication
Correct answer: Insecure direct object reference
Insecure direct object reference (IDOR) occurs when an application exposes internal object identifiers without proper authorization checks.
Question 2: In CRM performance testing, 'think time' refers to:
- The time a developer spends analyzing a bug
- The simulated pause between user actions to mimic real user behavior (Correct answer)
- The time the server takes to process a request
- The delay before a test script starts executing
Correct answer: The simulated pause between user actions to mimic real user behavior
Think time simulates the realistic pauses users take between interactions, producing more accurate load test results.
Question 3: A tester runs the same set of CRM test cases repeatedly without adding new ones. Over time, fewer bugs are found. This is called the:
- Defect clustering effect
- Pesticide paradox (Correct answer)
- Test saturation limit
- Exhaustion threshold
Correct answer: Pesticide paradox
The pesticide paradox describes how repeated use of the same tests makes them less effective at finding new defects over time.
Question 4: Which approach should a CRM testing team use to prioritize test cases when time is limited?
- Alphabetical order by test case name
- Risk-based testing focused on high-impact, high-probability failures (Correct answer)
- Random selection of test cases
- Testing only features added in the latest release
Correct answer: Risk-based testing focused on high-impact, high-probability failures
Risk-based testing allocates limited time to areas where failures are most likely and would have the greatest business impact.
Question 5: What is the purpose of a 'test environment' in CRM testing?
- A physical room dedicated to the testing team
- An isolated system that mirrors production for safe testing without affecting live data (Correct answer)
- The set of test cases written for a release
- A monitoring dashboard for tracking test results
Correct answer: An isolated system that mirrors production for safe testing without affecting live data
A test environment is a controlled replica of the production system where testing can occur without risking real customer data or operations.
Question 6: During CRM API testing, a tester sends a POST request to create a contact with a missing required field. The expected response code is:
- 200 OK
- 201 Created
- 400 Bad Request (Correct answer)
- 404 Not Found
Correct answer: 400 Bad Request
A 400 Bad Request response indicates the server could not process the request due to invalid or missing input data.
Question 7: A CRM test case fails only in Internet Explorer but passes in Chrome and Firefox. This indicates a need for:
- Performance testing
- Compatibility testing (Correct answer)
- Security testing
- Regression testing
Correct answer: Compatibility testing
Compatibility testing verifies that software works correctly across different browsers, operating systems, and devices.
CRM Testing 4
A CRM security tester attempts to access another user's contact records by manipulating the record ID in the URL.
This attack is called: