Selenium Security & Authentication 3

Question 1

When automating tests for a multi-factor authentication (MFA) flow, what strategy minimizes test fragility?

Accepted Answer

Mock the MFA provider at the network layer to return a predictable code

Answer

Mocking the MFA provider at the network or service layer returns a deterministic code, making tests reliable without depending on external SMS or TOTP timing.

Question 2

Which Selenium approach correctly validates that a logout action invalidates a user session on the server side?

Accepted Answer

After logout, attempt an API call with the old session token and assert it returns a 401 response

Answer

Validating the server-side session via an API call with the old token is the only reliable way to confirm the session was truly invalidated.

Question 3

A Selenium test needs to verify that a web form is protected against SQL injection. What is the correct testing approach?

Accepted Answer

Submit SQL payloads like ' OR '1'='1 through form fields and assert the application returns an error rather than data

Answer

Submitting known SQL injection payloads via the UI and asserting a safe error response (not data leakage) validates input sanitization end-to-end.

Question 4

How should a Selenium framework securely pass credentials to browser-based login flows in a CI/CD environment?

Accepted Answer

Read credentials from environment variables or a secrets manager at runtime

Answer

Environment variables or secrets managers (Vault, AWS Secrets Manager, CI secrets) prevent credentials from appearing in code or process listings.

Question 5

During a Selenium test, you detect that an application reflects user input directly in the page without encoding. Which vulnerability does this indicate?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

Unencoded reflection of user-controlled input in HTML output is the classic definition of a reflected XSS vulnerability.

(Selenium) Selenium Testing Certification Practice Test

(Selenium) Selenium Testing Certification Practice Test

Selenium Security & Authentication 3