In a DevOps lifecycle, what is a key adaptation for security testing to support continuous delivery?

Conducting security testing only in a staging environment after deployment

Eliminating manual security testing entirely to speed up delivery

Automating security tests and integrating them into the continuous integration/continuous deployment (CI/CD) pipeline

Performing a full security test suite only once before the final release

A company is using a DevOps model and wants to integrate security testing into their CI/CD pipeline. They have automated tools for SAST and DAST, but they also want to include manual security testing. How should they schedule the manual testing to align with the DevOps lifecycle?

Conduct manual testing only once per quarter

Replace automated testing with manual testing to save time

Run manual testing in parallel with development, focusing on complex security scenarios

Perform manual testing only after the release to production

Certified Tester Security Tester

Domain 3Objective 1

Security Testing Process Overview CT-SEC Practice Questions (Page 5)

Part of the Security Testing Processes domain, which makes up ~9% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

2concepts

Questions 21–22

21foundation · easy
In a DevOps lifecycle, what is a key adaptation for security testing to support continuous delivery?
Select an answer first
22application · medium
A company is using a DevOps model and wants to integrate security testing into their CI/CD pipeline. They have automated tools for SAST and DAST, but they also want to include manual security testing. How should they schedule the manual testing to align with the DevOps lifecycle?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Security Testing Process Overview CT-SEC Practice Questions (Page 5)

Questions 21–22

In a DevOps lifecycle, what is a key adaptation for security testing to support continuous delivery?

A company is using a DevOps model and wants to integrate security testing into their CI/CD pipeline. They have automated tools for SAST and DAST, but they also want to include manual security testing. How should they schedule the manual testing to align with the DevOps lifecycle?

Keep studying — Security Testing Processes