Best not to test protected methods directly, but the public api method/s that trigger the potentially failing use case. Protected and private methods can be changed and removed, which would require changing the tests, which means you can't use them to test for regressions.