Security Test Execution and Evaluation CT-SEC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security test team is planning a test for a new firewall configuration. The test objective is to verify that the firewall blocks all traffic from untrusted networks. The team has defined a set of test cases that send traffic from various source IPs and ports. After the test, the team wants to evaluate the coverage of the test. Which metric is most appropriate for evaluating coverage?

   • AThe time it took to execute all the test cases.
   • BThe number of firewall rules that were tested against at least one test case.
   • CThe total number of test cases executed, regardless of the outcome.
   • DThe percentage of test cases that passed (i.e., traffic was correctly blocked or allowed).
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   During a penetration test, a tester is running a series of automated vulnerability scans against a target application. Midway through the scan, the tester notices that the application's response times have increased significantly and some requests are timing out. The tester suspects the scan is causing a denial-of-service condition. What is the most appropriate immediate action?

   • AImmediately stop the scan and report the issue as a critical denial-of-service vulnerability in the application.
   • BContinue the scan at the same rate to ensure the test completes on schedule, as the application may recover on its own.
   • CPause the scan and investigate whether the increased response times are due to the scan's load or an unrelated issue.
   • DReduce the scan rate to a lower level and continue without further investigation.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When analyzing security test results, what should a tester do when a reported issue is not clearly a vulnerability?

   • AInvestigate further to determine if it is a real vulnerability or a false positive.
   • BAutomatically classify it as a false positive.
   • CReport it as a confirmed vulnerability.
   • DIgnore the issue and move on to the next test.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security test team has completed a test of a new authentication system. The test objective was to verify that the system is resistant to brute-force attacks. The team ran a series of tests with different password policies and account lockout settings. After the test, the team wants to evaluate the success of the test. Which criterion is most appropriate for evaluating success?

   • AThe total number of test cases that were executed during the test.
   • BThe time it took for the system to lock out an account after multiple failed attempts.
   • CThe percentage of test cases where the system successfully prevented unauthorized access through brute-force attempts.
   • DThe number of failed login attempts that were required to trigger an account lockout.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of network segmentation in a security test environment?

   • ATo ensure the test environment is realistic.
   • BTo reduce the need for test data.
   • CTo isolate test components and control traffic flow between them.
   • DTo increase the speed of the network for testing tools.
   Reveal Solution Discussion Select an answer first