CRM Testing 4

Question 1

A CRM security tester attempts to access another user's contact records by manipulating the record ID in the URL. This attack is called:

Accepted Answer

Insecure direct object reference

Answer

Insecure direct object reference (IDOR) occurs when an application exposes internal object identifiers without proper authorization checks.

Question 2

In CRM performance testing, 'think time' refers to:

Accepted Answer

The simulated pause between user actions to mimic real user behavior

Answer

Think time simulates the realistic pauses users take between interactions, producing more accurate load test results.

Question 3

A tester runs the same set of CRM test cases repeatedly without adding new ones. Over time, fewer bugs are found. This is called the:

Accepted Answer

Pesticide paradox

Answer

The pesticide paradox describes how repeated use of the same tests makes them less effective at finding new defects over time.

Question 4

Which approach should a CRM testing team use to prioritize test cases when time is limited?

Accepted Answer

Risk-based testing focused on high-impact, high-probability failures

Answer

Risk-based testing allocates limited time to areas where failures are most likely and would have the greatest business impact.

Question 5

What is the purpose of a 'test environment' in CRM testing?

Accepted Answer

An isolated system that mirrors production for safe testing without affecting live data

Answer

A test environment is a controlled replica of the production system where testing can occur without risking real customer data or operations.

CRM - Software Practice Test