A security team is evaluating the security of its organization's cloud infrastructure and wants to use a standard that provides a set of security controls for cloud services. Which standard is most relevant?

CSA Cloud Controls Matrix (CCM)

What is the primary purpose of security standards in the context of security testing?

To provide a common framework and terminology for planning, executing, and reporting security testing activities.

To replace the need for skilled security testers by automating all testing processes.

To guarantee that a system is completely free from vulnerabilities after testing.

To enforce a single, mandatory testing approach that all organizations must follow.

A security manager is developing a security testing program and wants to use a standard that provides a common language for describing and communicating cybersecurity risk to executives. Which standard is designed for this purpose?

NIST Cybersecurity Framework (CSF)

Certified Tester Security Tester

Domain 9Objective 3

Selection of Security Standards CT-SEC Practice Questions (Page 4)

Part of the Standards and Industry Trends domain, which makes up ~11% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

3concepts

Questions 16–19

16application · medium
A security team is evaluating the security of its organization's cloud infrastructure and wants to use a standard that provides a set of security controls for cloud services. Which standard is most relevant?
Select an answer first
17foundation · easy
A company processes credit card transactions and must comply with industry regulations. Which security standard is most directly relevant to their compliance obligations?
Select an answer first
18foundation · easy
What is the primary purpose of security standards in the context of security testing?
Select an answer first
19application · medium
A security manager is developing a security testing program and wants to use a standard that provides a common language for describing and communicating cybersecurity risk to executives. Which standard is designed for this purpose?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Selection of Security Standards CT-SEC Practice Questions (Page 4)

Questions 16–19

A security team is evaluating the security of its organization's cloud infrastructure and wants to use a standard that provides a set of security controls for cloud services. Which standard is most relevant?

A company processes credit card transactions and must comply with industry regulations. Which security standard is most directly relevant to their compliance obligations?

What is the primary purpose of security standards in the context of security testing?

A security manager is developing a security testing program and wants to use a standard that provides a common language for describing and communicating cybersecurity risk to executives. Which standard is designed for this purpose?

Keep studying — Standards and Industry Trends