Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
ISTQB logo

Certified Tester Security Tester

Domain 8Objective 4

Evaluating a Tool Vendor's Capabilities CT-SEC Practice Questions (Page 6)

Part of the Security Testing Tools domain, which makes up ~10% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here
7free pages
10concepts

Questions 26–30

  1. 26foundation · easy

    Which of the following is a key element to review in a vendor's contract?

    Select an answer first
  2. 27foundation · easy

    When reviewing a vendor's service level agreement (SLA), what is the most important aspect to examine?

    Select an answer first
  3. 28foundation · easy

    Which of the following is a primary indicator of a vendor's market reputation?

    Select an answer first
  4. 29application · medium

    A security team is finalizing a contract with a new SAST vendor. The vendor's SLA states a 99.9% uptime guarantee, but the team's critical scanning window is only 2 hours per night. The team needs to ensure that if the tool is unavailable during that window, they have recourse. What should the team do?

    Select an answer first
  5. 30application · medium

    A security team is choosing between two penetration testing tool vendors. Vendor X has been in the market for 15 years, has a large enterprise customer base, and is frequently mentioned in industry reports. Vendor Y is newer but has received several recent industry awards for innovation. The team values long-term stability and a proven track record. Which factor should carry the most weight in this decision?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.