Component and Integration Testing CT-SEC Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   During integration testing of a microservices-based application, the team wants to verify that the order service correctly passes authentication tokens to the payment service. Which security testing technique is most appropriate?

   • AWrite integration test cases that simulate a request from the order service to the payment service and verify that the token is present in the request headers.
   • BPerform a static code analysis on both services to look for hardcoded credentials.
   • CConduct a penetration test on the entire application to see if the token can be stolen.
   • DUse a service mesh to intercept and inspect the traffic between the two services.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A development team is writing a new authentication module for a web application. During component testing, they want to verify that the module correctly rejects passwords that are too short, too long, or contain invalid characters. Which security testing approach is most appropriate for this stage?

   • AWrite unit tests that call the authentication function with valid, invalid, and boundary values for password length and character set.
   • BConduct a code review of the authentication module to identify potential security flaws in the password validation logic.
   • CDeploy the module to a staging environment and run a full penetration test against the login endpoint.
   • DPerform fuzz testing on the authentication module's input fields with a wide range of malformed inputs.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   During component-level security testing, which activity is most appropriate to perform?

   • ALoad testing the complete application under peak user traffic
   • BStatic analysis of the component's source code to identify potential vulnerabilities
   • CReviewing the final security architecture documentation
   • DPenetration testing of the entire production environment
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   During component integration testing, what is a key security testing technique?

   • ATesting the component's documentation
   • BTesting the component's performance under load
   • CVerifying secure data flow between components
   • DTesting the component's user interface
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When designing security test cases for a component, which focus area is most relevant?

   • ANetwork firewall configuration
   • BInput validation
   • CEnd-user training
   • DPhysical security of data centers
   Reveal Solution Discussion Select an answer first