Selenium WebDriver Regulatory Frameworks & Compliance 4

Question 1

FedRAMP authorization requires that test tools used against government cloud systems meet specific security controls. Which ChromeDriver argument helps satisfy the SC-28 (Protection of Information at Rest) control during local test runs?

Accepted Answer

Using a user-data-dir on an encrypted volume and clearing it after each test run

Answer

Storing the Chrome user profile directory on an encrypted volume and wiping it post-run satisfies the at-rest protection control by ensuring no sensitive data persists unencrypted.

Question 2

OWASP's Testing Guide recommends verifying clickjacking protection. Which Selenium-based HTTP header assertion confirms that a page is protected against clickjacking?

Accepted Answer

Assert that the server returns X-Frame-Options: DENY or Content-Security-Policy with frame-ancestors 'none'

Answer

X-Frame-Options or the CSP frame-ancestors directive instructs browsers to refuse to render the page in a frame, preventing clickjacking attacks.

Question 3

A compliance requirement mandates that automated tests do not retain session tokens after test completion. Which Selenium teardown practice satisfies this requirement?

Accepted Answer

Call driver.manage().deleteAllCookies() and execute localStorage.clear() in an @AfterEach method

Answer

Deleting all cookies and clearing localStorage in a teardown hook removes session tokens from the browser before the driver session ends.

Question 4

WCAG 2.1 Success Criterion 1.4.3 requires a minimum color contrast ratio of 4.5:1 for normal text. Which Selenium-based approach can automate this check?

Accepted Answer

Use axe-core or a contrast analysis library after retrieving computed color values via JavaScript execution

Answer

axe-core or dedicated contrast libraries calculate the actual contrast ratio from computed foreground and background colors, providing an automated WCAG 1.4.3 assertion.

Question 5

Under COPPA, websites must not collect personal information from children under 13 without parental consent. Which Selenium test verifies that an age gate prevents underage access?

Accepted Answer

Enter a birth year that makes the user under 13, submit, and assert that access is denied with an appropriate message

Answer

Functionally simulating an underage submission and asserting the denial response validates that the age gate enforcement logic actually works end-to-end.

Selenium WebDriver Practice Test

Selenium WebDriver Practice Test

Selenium WebDriver Regulatory Frameworks & Compliance 4