Types and Purposes of Security Testing Tools CT-SEC Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of penetration testing tools?

   • ATo automatically detect known vulnerabilities in systems
   • BTo simulate attacks and determine if vulnerabilities can be exploited
   • CTo aggregate and correlate security events in real time
   • DTo analyze source code for security flaws without executing it
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security operations center (SOC) analyst needs to correlate login failures from multiple servers with firewall alerts to detect a potential brute-force attack spreading across the network. The analyst needs a tool that can aggregate these events in real time and provide a unified view for investigation. Which type of tool should be used?

   • AA network sniffer that captures raw packets from the network
   • BA vulnerability scanner that checks for missing patches on the servers
   • CA SIEM tool that aggregates and correlates security events from multiple sources
   • DA forensic tool that analyzes disk images from the servers
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A QA engineer needs to test a web application's login form for input-handling flaws before release. The engineer wants to automatically send thousands of unexpected, malformed inputs to the login fields and observe how the application responds, without manually crafting each test case. Which type of tool should the engineer use?

   • AA fuzzing tool that generates malformed inputs and monitors for crashes or unexpected behavior
   • BA static analysis tool that scans the login form's source code for common input-validation weaknesses
   • CA vulnerability scanner that checks the login form against a database of known CVEs
   • DA network sniffer that captures and analyzes traffic between the browser and the login form
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which type of tool helps systematically identify and prioritize potential threats to a system?

   • AForensic tool
   • BThreat modeling tool
   • CPenetration testing tool
   • DVulnerability scanner
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A development team wants to identify security flaws in a new microservice's source code before it is deployed. The team has a strict policy that no code can be executed in the CI pipeline due to resource constraints. Which type of tool should the team integrate into their CI pipeline?

   • AA static analysis tool that scans the source code for known insecure patterns
   • BA dynamic analysis tool that runs the microservice in a sandbox and probes it with test inputs
   • CA vulnerability scanner that scans the deployed microservice for known CVEs
   • DA fuzzing tool that sends malformed inputs to the running microservice
   Reveal Solution Discussion Select an answer first