A tester is evaluating a system that uses ECC for digital signatures. The system uses curve P-256. The tester needs to verify that the implementation is secure. Which test should the tester perform?

Verify that the curve parameters are hardcoded and not validated.

Verify that the random number generator (RNG) used for signatures is cryptographically secure.

Verify that the signature is 256 bits long.

Verify that the private key is stored in plaintext in the database.

Certified Tester Security Tester

Domain 5Objective 3

Encryption CT-SEC Practice Questions (Page 6)

Part of the Testing Security Mechanisms domain, which makes up ~17% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

Questions 26–26

26application · medium
A tester is evaluating a system that uses ECC for digital signatures. The system uses curve P-256. The tester needs to verify that the implementation is secure. Which test should the tester perform?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Encryption CT-SEC Practice Questions (Page 6)

Questions 26–26

A tester is evaluating a system that uses ECC for digital signatures. The system uses curve P-256. The tester needs to verify that the implementation is secure. Which test should the tester perform?

Keep studying — Testing Security Mechanisms