Confidentiality of Security Test Results CT-SEC Practice Questions (Page 4)

Questions 16–19

1. 16foundation · easy

   What is the purpose of role-based access control (RBAC) for security test results?

   • ATo encrypt the results automatically
   • BTo speed up the testing process
   • CTo make the results available to all employees for transparency
   • DTo ensure only authorized personnel can view or modify the results
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is it important to maintain the confidentiality of security test results?

   • ATo prevent an attacker from using the findings to exploit the system before a fix is deployed
   • BTo ensure the test results are stored in a format that is easy to read by all stakeholders
   • CTo comply with the tester's personal preference for keeping work private
   • DTo reduce the time needed to write the final test report
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which communication channel is most appropriate for sending security test results to stakeholders?

   • AA printed copy left in a common area
   • BA public social media post
   • CEncrypted email with password-protected attachments
   • DAn unencrypted internal chat message
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of a contractual obligation regarding security test results?

   • AA company policy on office dress code
   • BA marketing strategy for promoting the test report
   • CA non-disclosure agreement (NDA) signed with the client
   • DA personal preference for sharing results with friends
   Reveal Solution Discussion Select an answer first