Component and Integration Testing CT-SEC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a focus of security testing during component integration testing?

   • ASecure interactions between components
   • BThe component's code style
   • CThe component's memory usage
   • DThe component's internal algorithms
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A security tester is working on a project that uses continuous integration (CI). The team wants to include security testing in the CI pipeline. Which security testing activity is most appropriate for component-level testing in the CI pipeline?

   • ARun a manual security code review on every build.
   • BRun a fuzzing tool on every build.
   • CRun a full penetration test on every build.
   • DRun a static code analysis tool on every build.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which security testing activity is typically performed during component testing?

   • ASecurity-focused code reviews of the component
   • BSecurity testing of the complete system's user interface
   • CSecurity testing of the production network infrastructure
   • DSecurity testing of the final deployment configuration
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When designing security test cases for component integration, which aspect should be considered?

   • AInterface vulnerabilities
   • BThe component's compilation flags
   • CThe component's code comments
   • DThe component's internal data structures
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When analyzing the results of component-level security tests, what is the primary goal?

   • AEvaluate the component's performance
   • BIdentify vulnerabilities in the component
   • CDetermine the cost of the component
   • DAssess user satisfaction
   Reveal Solution Discussion Select an answer first