Objective: Security CT-ACT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · medium

   Which security test design technique focuses on identifying all the entry points and exit points of a system that an attacker could exploit?

   • ASecurity regression testing
   • BThreat modeling
   • CAbuse case testing
   • DAttack surface analysis
   Reveal Solution Discussion Select an answer first
2. 17foundation · medium

   Which security test design technique involves systematically identifying potential threats to a system?

   • AAbuse case testing
   • BPenetration testing
   • CThreat modeling
   • DAttack surface analysis
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A team is designing security acceptance tests for a new file-sharing application. The application allows users to upload, download, and share files with other users. The team wants to ensure that the system can withstand a malicious user attempting to upload a file with an excessively large size to exhaust server storage. Which security test design technique should the team use to create this test scenario?

   • AThreat model that identifies the server's operating system version
   • BAttack surface analysis that maps all network ports open on the server
   • CPenetration test that uses automated tools to scan for known vulnerabilities
   • DAbuse case that describes a user attempting to upload a file exceeding the maximum allowed size
   Reveal Solution Discussion Select an answer first
5. 19foundation · medium

   Which of the following is the BEST example of a security requirement for an acceptance test?

   • AThe system shall be available 99.9% of the time.
   • BThe system shall have a user-friendly interface.
   • CThe system shall respond to user input within 2 seconds.
   • DThe system shall encrypt all data in transit using TLS 1.2 or higher.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A team is planning acceptance testing for a new online learning platform. The platform will store student grades, personal information, and course materials. The product owner has stated that the system must protect student data from unauthorized access and ensure that grades are not accidentally modified. The team is now defining the security acceptance test scenarios. Which security requirement should be the primary focus of the test scenarios?

   • AConfidentiality, because the system stores sensitive student data that must be protected from unauthorized access
   • BNon-repudiation, because the system must prove who accessed student data
   • CAvailability, because students need access to course materials
   • DIntegrity, because grades must not be accidentally modified
   Reveal Solution Discussion Select an answer first