After a suspected data breach, an incident response team needs to preserve evidence from a compromised server. The team must create a bit-for-bit copy of the server's hard drive and analyze it for signs of malicious activity without altering the original evidence. Which type of tool should be used?

A SIEM tool that aggregates logs from the compromised server

A network monitoring tool that captures traffic to and from the server

A forensic tool that creates disk images and analyzes them for evidence

A vulnerability scanner that checks the server for known vulnerabilities

An organization must demonstrate compliance with a security standard that requires quarterly vulnerability scans and configuration reviews of all database servers. The compliance team needs a tool that can automate these checks and produce evidence reports for auditors. Which type of tool should be used?

A fuzzing tool that sends malformed data to the database servers

A compliance and audit tool that automates checks and generates evidence reports

A penetration testing tool that exploits vulnerabilities in the database servers

A threat modeling tool that identifies potential threats to the database servers

A security tester is evaluating a custom web application for common issues such as SQL injection, cross-site scripting, and insecure authentication. The tester needs a tool that can crawl the application, identify input points, and automatically test them for these specific web vulnerabilities. Which type of tool is most suitable?

A general network vulnerability scanner that checks for missing patches on the web server

A static analysis tool that reviews the web application's source code

A web application security scanner that crawls and tests for web-specific vulnerabilities

A fuzzing tool that sends random data to the web application's endpoints

Certified Tester Security Tester

Domain 8Objective 1

Types and Purposes of Security Testing Tools CT-SEC Practice Questions (Page 6)

Part of the Security Testing Tools domain, which makes up ~10% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

14concepts

14 Concepts in This Objective

Static Analysis Tools
Dynamic Analysis Tools
Penetration Testing Tools
Vulnerability Scanning Tools
Fuzzing Tools
Web Application Security Tools
Network Security Tools
Mobile Application Security Tools
Database Security Tools
Code Review Tools
Threat Modeling Tools
Security Information and Event Management (SIEM) Tools
Forensic Tools
Compliance and Audit Tools

Questions 26–30

26foundation · easy
Which type of security testing tool analyzes an application while it is running?
Select an answer first
27application · medium
After a suspected data breach, an incident response team needs to preserve evidence from a compromised server. The team must create a bit-for-bit copy of the server's hard drive and analyze it for signs of malicious activity without altering the original evidence. Which type of tool should be used?
Select an answer first
28foundation · easy
Which type of tool supports manual and automated code inspection for security flaws?
Select an answer first
29application · medium
An organization must demonstrate compliance with a security standard that requires quarterly vulnerability scans and configuration reviews of all database servers. The compliance team needs a tool that can automate these checks and produce evidence reports for auditors. Which type of tool should be used?
Select an answer first
30application · medium
A security tester is evaluating a custom web application for common issues such as SQL injection, cross-site scripting, and insecure authentication. The tester needs a tool that can crawl the application, identify input points, and automatically test them for these specific web vulnerabilities. Which type of tool is most suitable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Types and Purposes of Security Testing Tools CT-SEC Practice Questions (Page 6)

Questions 26–30

Which type of security testing tool analyzes an application while it is running?

After a suspected data breach, an incident response team needs to preserve evidence from a compromised server. The team must create a bit-for-bit copy of the server's hard drive and analyze it for signs of malicious activity without altering the original evidence. Which type of tool should be used?

Which type of tool supports manual and automated code inspection for security flaws?

Keep studying — Security Testing Tools