The output must be high only when both inputs are high. A self-checking test should cover all four input combinations.