Evaluating a Tool Vendor's Capabilities CT-SEC Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of a compatibility consideration when evaluating a security testing tool?

   • AWhether the tool's logo matches the organization's branding
   • BWhether the tool's price fits the budget
   • CWhether the tool supports the operating systems used in the organization
   • DWhether the tool's documentation is written in the organization's language
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When evaluating a security testing tool vendor, which three areas are typically considered the key criteria for assessing the vendor's overall capabilities?

   • AUser interface design, color scheme, and documentation style
   • BMarketing materials, sales team size, and office location
   • CNumber of employees, annual revenue, and stock price
   • DTool functionality, vendor support, and product roadmap
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A large enterprise is evaluating a web application firewall (WAF) vendor. The WAF will be placed in front of all customer-facing applications, which experience peak traffic during promotional events. The security team needs to ensure the WAF can handle the peak load without introducing latency. Which evaluation activity is most appropriate?

   • ACompare the WAF's price per Mbps with other vendors.
   • BReview the vendor's marketing materials that claim 'unlimited scalability'.
   • CCheck the vendor's number of employees on LinkedIn.
   • DPerform a load test that simulates the expected peak traffic and measures the WAF's latency and throughput.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following best describes the process of evaluating a security testing tool's functionality?

   • AAsking other customers about their satisfaction with the vendor
   • BChecking the tool's price against the budget
   • CComparing the tool's features and technical capabilities against the organization's security testing requirements
   • DReviewing the vendor's marketing brochures and website
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security team is evaluating a new SCA tool. The tool must work with their existing Azure DevOps pipelines and must automatically create work items in Azure Boards when a vulnerability is found. During the proof of concept, which test is most important to perform?

   • AVerify that the tool can be installed as an Azure DevOps extension and that a successful scan creates a work item in Azure Boards.
   • BMeasure the tool's scan time on a large codebase to ensure it completes within the pipeline's timeout.
   • CCheck the vendor's customer references in the same industry.
   • DCompare the tool's vulnerability database size with that of other vendors.
   Reveal Solution Discussion Select an answer first