Security Testing CT-GT Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   A security tester is analyzing a web application for SQL injection and cross-site scripting (XSS) vulnerabilities. The tester wants to automate the identification of these issues while also allowing manual verification. Which tool is best suited for this task?

   • ANmap
   • BWireshark
   • CBurp Suite
   • DJohn the Ripper
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In the context of system security testing, what does 'scope' typically define?

   • AThe budget allocated for the testing effort
   • BThe number of test cases to be executed
   • CThe names of the test team members
   • DThe boundaries of what is tested, including systems, data, and types of attacks
   Reveal Solution Discussion Select an answer first
4. 28expert · medium · select all that apply

   A security team is selecting tools for a comprehensive security assessment of a gambling operator's environment. The assessment must include network vulnerability scanning, web application testing, and password policy auditing. Which two tools would be most appropriate for these tasks? (Select all that apply.)

   • AWireshark
   • BJohn the Ripper
   • CBurp Suite
   • DNessus
   Check answers Discussion Select an answer first
5. 29foundation · easy

   What is the main objective of network security testing in a gambling environment?

   • ATo measure the latency of the network connection to the game servers
   • BTo identify weaknesses in the network infrastructure that could be exploited by attackers
   • CTo verify that all network cables are properly labeled
   • DTo ensure the network can handle peak traffic during major sporting events
   Reveal Solution Discussion Select an answer first