Model-Based Testing of Off-Nominal Behaviors