Question 590
In a fictional application-delivery project, the team reports: An authorization method contains a hidden fallback allow after all known roles fail, but testers generate inputs only from the public role specification and never execute that code branch. Which observation best verifies that the stated testing issue is addressed?
Explanation
Correct Answer
This is the expected verification outcome: An unknown role reaches the fallback and reveals an authorization defect. It directly checks the corrective activity (Add structure-informed negative tests targeting the fallback decision and then assess the behavior against policy.) for the described testing problem.
Incorrect Answers
This result may validate another testing scenario: A component contains an if branch that computes a discount only for Premium customers, and tests cover Premium input alone yet report 100% branch coverage. It does not establish the required result for this case: An unknown role reaches the fallback and reveals an authorization defect.
This result may validate another testing scenario: A team has 100% branch coverage for its error-prone payment module but ignores a requirement for duplicate-charge prevention absent from all code. It does not establish the required result for this case: An unknown role reaches the fallback and reveals an authorization defect.
This result may validate another testing scenario: A warehouse order can move Created to Paid to Shipped, yet tests attempt Created to Shipped and treat any rejection as a defect. It does not establish the required result for this case: An unknown role reaches the fallback and reveals an authorization defect.