Selenium Testing Framework Regulatory Frameworks & Compliance 4

Question 1

A Selenium test must verify GDPR cookie consent compliance. Which sequence of assertions is correct?

Accepted Answer

On first visit, assert consent banner is visible and no analytics cookies are set; after accepting, assert analytics cookies are present

Answer

GDPR requires no non-essential cookies before explicit consent, so the banner must appear first and analytics cookies must only be set after user acceptance.

Question 2

Which Selenium approach validates compliance with WCAG 2.1 Success Criterion 2.4.3 (Focus Order)?

Accepted Answer

Tab through all interactive elements and assert that focus moves in a logical, content-order sequence

Answer

WCAG 2.4.3 requires focus to follow a sequence that preserves meaning, which is validated by tabbing through the page and verifying the order matches the visual/logical layout.

Question 3

Under OWASP Top 10 compliance testing, which Selenium technique helps identify Broken Access Control (A01)?

Accepted Answer

Log in as a low-privilege user and attempt to navigate directly to admin-only URLs, asserting a 403 or redirect response

Answer

Broken Access Control is detected by testing whether unauthorized users can access restricted resources directly, which Selenium can automate by navigating to protected URLs with underprivileged sessions.

Question 4

When automating compliance tests for a multilingual US government site under Executive Order 13166 (language access), what should Selenium verify?

Accepted Answer

That language selection controls are present, functional, and persist the user's chosen language across pages

Answer

EO 13166 requires meaningful access for people with limited English proficiency, so language selection must be discoverable, functional, and persistent.

Question 5

A Selenium test suite must comply with data minimization principles under GDPR Article 5. Which test design practice aligns with this?

Accepted Answer

Use synthetic or anonymized test data instead of real user PII in test scripts and fixtures

Answer

GDPR data minimization requires collecting only necessary data; test suites should mirror this by using synthetic data rather than real PII.

Selenium Testing Framework Practice Test

Selenium Testing Framework Practice Test

Selenium Testing Framework Regulatory Frameworks & Compliance 4