Security Test Execution and Evaluation CT-SEC Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security tester is running a penetration test against a web application. The tester is using a proxy tool to intercept and modify requests. Midway through the test, the tester notices that the proxy is not capturing any traffic from the application. The tester suspects the application is using certificate pinning. What is the most appropriate action?

   • AUse a different proxy tool that may be able to bypass certificate pinning.
   • BContinue the test without the proxy, relying on the application's logs to identify vulnerabilities.
   • CStop the test and report that the application is secure because certificate pinning is in place.
   • DInstall the proxy's certificate on the test device and disable certificate pinning in the application if possible.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security analyst is analyzing the results of a vulnerability scan. The scanner reported a 'Cross-Site Scripting (XSS)' vulnerability in a comment field. The analyst manually tested the field with a standard XSS payload and the payload was executed in the browser. However, the analyst also noticed that the application uses a Content Security Policy (CSP) that should block inline scripts. The analyst is unsure if the vulnerability is real. What is the most appropriate next step?

   • AMark the vulnerability as a false positive because the CSP should block the payload.
   • BIgnore the CSP and focus on other findings, as the XSS is a well-known vulnerability type.
   • CInvestigate the CSP configuration to determine if it is properly implemented and if the XSS payload bypasses it.
   • DReport the vulnerability as a confirmed XSS, as the payload was executed in the browser.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security test team has completed a penetration test against a critical internal application. The test objectives were to identify vulnerabilities that could lead to unauthorized data access. The team found several medium-severity vulnerabilities and one high-severity vulnerability. Management asks for a summary of the test's success. Which metric best demonstrates the test's success in meeting its objectives?

   • AThe percentage of test cases that were executed without errors or interruptions.
   • BThe number of high-severity vulnerabilities that were successfully exploited to gain unauthorized data access.
   • CThe total number of vulnerabilities found, including both medium and high severity.
   • DThe number of false positives identified during the test, as a measure of the scanner's accuracy.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A penetration tester has completed a test and is writing the final report. The report includes a detailed technical description of a critical vulnerability, including the exact exploit code used. The report will be shared with both the development team and senior management. What is the most appropriate way to present this information?

   • AInclude the full technical details and exploit code in the main report, as it is important for the development team to understand the issue.
   • BOmit the exploit code from the report entirely and only describe the vulnerability in general terms to avoid any risk of misuse.
   • CProvide a high-level summary in the main report for management, and include the detailed technical findings and exploit code in a separate technical annex for the development team.
   • DSend the full technical report only to senior management and let them decide what to share with the development team.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   When setting up a security test environment, why is it important to configure test data that is representative of production data?

   • ATo make the test results more accurate and applicable to the real system.
   • BTo ensure the test environment is isolated from production.
   • CTo reduce the storage space required for the test environment.
   • DTo simplify the test environment setup process.
   Reveal Solution Discussion Select an answer first