Certified Tester Security Tester
Domain 1Objective 3
Analysis of Risk Assessment Techniques CT-SEC Practice Questions (Page 4)
Part of the The Basis of Security Testing domain, which makes up ~19% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)
30questions here
6free pages
6concepts
Questions 16–20
- 16
Which of the following is typically included in a risk assessment report?
Select an answer first - 17
A security tester is conducting a risk assessment for a hospital's patient record system. The tester needs to identify the assets that are most critical to the organization. Which of the following is an asset in this context?
Select an answer first - 18
What is a risk register typically used for in a risk assessment?
Select an answer first - 19
Which of the following is an example of a quantitative risk analysis metric?
Select an answer first - 20
An organization decides to stop using a third-party component that has known critical vulnerabilities. Which risk treatment option is this?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.