Develop Security Testing Strategy & Plan CSSLP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is the primary goal of functional security testing?

   • ATo assess the maturity of the organization's security processes
   • BTo discover unknown vulnerabilities through adversarial techniques
   • CTo verify that security features and controls behave as specified
   • DTo measure how the system performs under heavy load
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is launching a bug bounty program. The security team wants to ensure that the program is effective while minimizing legal and operational risks. The team has limited resources for triaging reports. Which approach is most appropriate?

   • AKeep the program private to avoid public attention
   • BOpen the program to all researchers with a broad scope
   • CLimit the program to a small group of vetted researchers
   • DOffer high rewards to attract more researchers
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is considering launching a bug bounty program. The security team wants to ensure that the program is aligned with industry standards and best practices. Which standard is most relevant to guide the development of the bug bounty program?

   • AOWASP Testing Guide
   • BNIST SP 800-115
   • CISO/IEC 27001
   • DISO/IEC 29147
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security team is setting up a test environment for a new application that will be deployed on multiple platforms. They need to ensure that the application behaves consistently across different operating systems and browsers. Which component of the test environment is most critical to address this requirement?

   • ATest harness
   • BSanitized data
   • CMock services
   • DInteroperability testing
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A test harness is being set up to automate the execution of security test cases against an application. What is the primary purpose of a test harness in this context?

   • ATo ensure the application is compatible with all operating systems
   • BTo provide a framework for executing and managing test cases automatically
   • CTo replace the need for a separate testing environment
   • DTo generate the application's source code for testing
   Reveal Solution Discussion Select an answer first