A tester is evaluating a malware scanner's performance. The scanner takes an average of 30 seconds to scan a 1 GB file. The tester needs to scan 100 GB of data. What is the most important consideration when interpreting the scan time?

The scan time will be faster on a system with more RAM.

The scan time is directly proportional to file size, so the total scan time will be approximately 50 minutes.

The scan time is irrelevant because the scanner is automated.

The scan time may vary depending on the file types and whether the scanner uses heuristics.

What should be included in a malware scanning test report to help stakeholders understand the risk?

The names of the testers who ran the scans

The version of the operating system used

The detection rate and false positive rate

The IP addresses of all scanned systems

A security tester needs to scan a large number of files for malware as part of a security assessment. The tester wants to use a tool that can be automated and integrated into a CI/CD pipeline. Which type of tool is most appropriate?

A command-line antivirus scanner that supports scripting and exit codes.

A GUI-based antivirus scanner with a user-friendly interface.

A network-based intrusion detection system.

A web application scanner that checks for vulnerabilities.

A security tester is setting up a malware scanning test environment. The tester has a limited budget and needs to scan a large number of files. The tester is considering using a cloud-based malware scanning service. What is the most important consideration when using a cloud-based service?

The malware samples may be uploaded to the cloud provider, which could violate confidentiality policies.

The cost per scan may be higher than an on-premises solution, but it can scale easily.

The cloud service may have a slower scan time than an on-premises scanner.

The cloud service may not support all file types.

Certified Tester Security Tester

Domain 5Objective 6

Malware Scanning CT-SEC Practice Questions (Page 1)

Part of the Testing Security Mechanisms domain, which makes up ~17% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

6concepts

Questions 1–5

1foundation · easy
Which tool is primarily used for signature-based detection of known malware during a security test?
Select an answer first
2application · medium
A tester is evaluating a malware scanner's performance. The scanner takes an average of 30 seconds to scan a 1 GB file. The tester needs to scan 100 GB of data. What is the most important consideration when interpreting the scan time?
Select an answer first
3foundation · easy
What should be included in a malware scanning test report to help stakeholders understand the risk?
Select an answer first
4application · medium
A security tester needs to scan a large number of files for malware as part of a security assessment. The tester wants to use a tool that can be automated and integrated into a CI/CD pipeline. Which type of tool is most appropriate?
Select an answer first
5expert · hard
A security tester is setting up a malware scanning test environment. The tester has a limited budget and needs to scan a large number of files. The tester is considering using a cloud-based malware scanning service. What is the most important consideration when using a cloud-based service?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.