Users of a banking application may try to withdraw funds that don't exist from their account. Developers are aware of this threat and implemented code to protect against it. What type of software testing would most likely catch this type of vulnerability if the developers have not already remediated it?

Secret questions are prompted or answer to validate the fund transfer would most likely catch this type of vulnerability if the developers have not already remediated it.

Explanation:

During developing bank application End user has to check all kind of threats such as validation password and account details and encrypt technology. If unwanted user accessing and try to access fund to do validation secret password and OTP validation is be checked and password to be encryption.

During password entering end user has to enter password within time limit and method of entering is also validated. End User is provided keyboard onscreen to enter the password and physical keyboard to be locked. During the entering the password each character is monitor with time limit.