Security testing tools overview in Testing Fundamentals - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to print the name of a popular open-source security testing tool.

Testing Fundamentals

tool = "[1]"
print(tool)

Drag options to blanks, or click blank then click option'

ANmap

BSelenium

CJMeter

DPostman

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing tools used for functional testing instead of security testing.

Nmap is a popular open-source tool used for network security scanning.

2fill in blank

medium

Complete the code to assign the correct type of security testing tool to the variable.

Testing Fundamentals

tool_type = "[1]"  # Tool used for finding vulnerabilities in web applications

Drag options to blanks, or click blank then click option'

ALoad Testing

BDynamic Analysis

CStatic Analysis

DFunctional Testing

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing static and dynamic analysis.

Dynamic Analysis tools test running applications to find security vulnerabilities.

3fill in blank

hard

Fix the error in the code to correctly import and use a security testing tool library.

Testing Fundamentals

import [1]

scanner = [1].PortScanner()
scanner.run()

Drag options to blanks, or click blank then click option'

Aselenium

Bpytest

Cnmap

Drequests

Attempts:

3 left

💡 Hint

Common Mistakes

Using libraries unrelated to security scanning.

The 'nmap' library is used for network scanning in security testing.

4fill in blank

hard

Fill both blanks to create a dictionary mapping tool names to their testing types.

Testing Fundamentals

security_tools = {
    "[1]": "Static Analysis",
    "[2]": "Dynamic Analysis"
}

Drag options to blanks, or click blank then click option'

ASonarQube

BJMeter

COWASP ZAP

DPostman

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing load testing tools with security testing tools.

SonarQube is used for static code analysis, while OWASP ZAP is a dynamic analysis tool for web apps.

5fill in blank

hard

Fill all three blanks to create a list of tools categorized by their primary security testing focus.

Testing Fundamentals

tools = {
    "network_scanning": "[1]",
    "web_app_testing": "[2]",
    "code_analysis": "[3]"
}

Drag options to blanks, or click blank then click option'

ANmap

BOWASP ZAP

CSonarQube

DJMeter

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing performance testing tools with security testing tools.

Nmap is for network scanning, OWASP ZAP for web app testing, and SonarQube for code analysis.