Certified Tester Security Tester
Domain 9Objective 3
Selection of Security Standards CT-SEC Practice Questions (Page 3)
Part of the Standards and Industry Trends domain, which makes up ~11% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)
19questions here
4free pages
3concepts
Questions 11–15
- 11
Which security standard is primarily focused on providing guidance for web application security testing?
Select an answer first - 12
A security tester is performing a penetration test on a web application and wants to use a standard that provides a prioritized list of the most common web application security risks. Which standard should the tester reference?
Select an answer first - 13
A startup is building a mobile payment app and wants to ensure its backend APIs are secure. The team wants a standard that provides a detailed set of security requirements for APIs. Which standard should they use?
Select an answer first - 14
A company is considering adopting a security standard but has limited resources and needs to prioritize its security testing efforts. The team wants a standard that provides a prioritized list of actions to improve security. Which standard is most suitable for this need?
Select an answer first - 15
A security tester is asked to evaluate the security of a web application and wants to use a standard that provides a comprehensive set of security requirements for web applications. Which standard should the tester use?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.