When designing a test to evaluate a malware scanner's effectiveness, what should be included alongside the malware samples?

A network traffic capture to analyze

A set of clean files to measure false positives

A backup of the scanner's configuration

When deploying a malware scanner in a test environment, what is a recommended practice to avoid interference with other security tools?

Run the scanner with administrative privileges on the host OS

Install the scanner on the same host as the firewall

Use a dedicated virtual machine for the scanner

Disable all other security tools during scanning

Certified Tester Security Tester

Domain 5Objective 6

Malware Scanning CT-SEC Practice Questions (Page 7)

Part of the Testing Security Mechanisms domain, which makes up ~17% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

6concepts

Questions 31–32

31foundation · easy
When designing a test to evaluate a malware scanner's effectiveness, what should be included alongside the malware samples?
Select an answer first
32foundation · easy
When deploying a malware scanner in a test environment, what is a recommended practice to avoid interference with other security tools?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Malware Scanning CT-SEC Practice Questions (Page 7)

Questions 31–32

When designing a test to evaluate a malware scanner's effectiveness, what should be included alongside the malware samples?

When deploying a malware scanner in a test environment, what is a recommended practice to avoid interference with other security tools?

Keep studying — Testing Security Mechanisms