Security Testing CT-GT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the purpose of the reporting step in the security testing process?

   • ATo document the vulnerabilities found and provide recommendations for remediation
   • BTo define the scope of the test
   • CTo execute the actual security tests
   • DTo fix the vulnerabilities immediately
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is security testing important for regulatory compliance in the gambling industry?

   • AIt replaces the need for other compliance audits
   • BIt guarantees that no security breach will ever occur
   • CIt helps demonstrate that the organization has taken reasonable steps to protect player data and system integrity
   • DIt is only required for online gambling, not land-based casinos
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which security testing technique is best suited for identifying vulnerabilities that only manifest when the application is running, such as SQL injection?

   • ADynamic analysis
   • BCode review
   • CStatic analysis
   • DConfiguration review
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A development team is building a new online poker platform. They want to identify security flaws early in the development lifecycle, before the code is deployed. Which security testing technique is most suitable for this stage?

   • APenetration testing of the production environment after launch.
   • BNetwork vulnerability scanning of the hosting infrastructure.
   • CDynamic application security testing (DAST) against a staging environment.
   • DStatic application security testing (SAST) integrated into the CI/CD pipeline.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the key difference between static and dynamic analysis in security testing?

   • AStatic analysis is performed only by automated tools, while dynamic analysis is always manual
   • BStatic analysis examines code without executing it, while dynamic analysis tests the running application
   • CStatic analysis is faster than dynamic analysis
   • DStatic analysis is used for network testing, while dynamic analysis is used for application testing
   Reveal Solution Discussion Select an answer first