Why is it important to communicate risk assessment findings to stakeholders in a clear and understandable manner?

To demonstrate that the security testing team is technically proficient

To comply with a legal requirement that all risks be published publicly

To ensure stakeholders can make informed decisions about risk acceptance and mitigation

To shift responsibility for risks from the testing team to the stakeholders

Which statement best describes the relationship between risk assessment and security testing?

Risk assessment is a one-time activity performed before any testing begins

Security testing is used solely to validate the accuracy of the risk assessment

Risk assessment and security testing are independent activities with no influence on each other

Risk assessment provides input to security testing by identifying what to test and how much effort to apply

Certified Tester Security Tester

Domain 1Objective 1

The Role of Risk Assessment in Security Testing CT-SEC Practice Questions (Page 6)

Part of the The Basis of Security Testing domain, which makes up ~19% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

Questions 26–27

26foundation · easy
Why is it important to communicate risk assessment findings to stakeholders in a clear and understandable manner?
Select an answer first
27foundation · easy
Which statement best describes the relationship between risk assessment and security testing?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

The Role of Risk Assessment in Security Testing CT-SEC Practice Questions (Page 6)

Questions 26–27

Why is it important to communicate risk assessment findings to stakeholders in a clear and understandable manner?

Which statement best describes the relationship between risk assessment and security testing?

Keep studying — The Basis of Security Testing