Selenium WebDriver Regulatory Frameworks & Compliance 5

Question 1

GDPR Article 17 grants users the right to erasure. Which Selenium test scenario validates that a 'Delete My Account' feature is compliant?

Accepted Answer

Delete the account via the UI, then assert that re-logging in and querying the user's data both return not-found responses

Answer

End-to-end verification that the account and associated data are unreachable after deletion confirms that the erasure right is functionally implemented.

Question 2

Which Selenium WebDriver configuration ensures that browser proxy settings route test traffic through a compliance-mandated network inspection gateway?

Accepted Answer

Set a Proxy object with proxyType MANUAL and the gateway address in httpProxy and sslProxy fields

Answer

Using the W3C-standard Proxy capability with MANUAL type and explicit httpProxy/sslProxy fields is the portable, specification-compliant way to route WebDriver traffic through a gateway.

Question 3

A security compliance policy mandates that automated tests validate HTTP Strict Transport Security (HSTS) headers. Which Selenium-based approach correctly checks for HSTS?

Accepted Answer

Execute an HTTP request via a proxy or logging driver, capture response headers, and assert Strict-Transport-Security is present with a sufficient max-age

Answer

HSTS is an HTTP response header, so it must be captured at the network level via a proxy or logging driver since WebDriver does not expose raw response headers natively.

Question 4

ISO 27001 Annex A control A.12.6.1 requires timely identification of technical vulnerabilities. How should a Selenium test suite be maintained to support this control?

Accepted Answer

Regularly update Selenium, browser drivers, and all dependencies, and include dependency scanning in the CI pipeline

Answer

Keeping dependencies current and scanning for known CVEs in the CI pipeline directly addresses the technical vulnerability management control in ISO 27001.

Question 5

A compliance audit requires evidence that automated Selenium tests ran against the correct environment (production vs. staging). Which technique provides the most reliable verification?

Accepted Answer

Assert the base URL and environment identifier at the start of each test and include them in the test report

Answer

In-test assertions against the base URL that are captured in the test report create tamper-evident, verifiable evidence that the test ran against the declared environment.

Selenium WebDriver Practice Test

Selenium WebDriver Practice Test

Selenium WebDriver Regulatory Frameworks & Compliance 5