Which of the following is an example of a security tester applying organizational procedures?

Using a personal laptop for testing without approval

Choosing to skip documentation to save time

Sharing test results with unauthorized personnel

Following the defined steps for requesting and using test environments

How should a security tester align their activities with organizational security policies?

By ignoring policies to focus on technical vulnerabilities

By reporting all findings directly to external authorities

By creating new policies during testing to address discovered issues

By ensuring that testing activities are conducted within the boundaries defined by the policies

What is the primary purpose of a security policy in an organization?

To establish high-level rules and requirements that guide the organization's security posture

To document the results of security tests and audits for management review

To replace the need for technical security controls by relying on user awareness

To provide step-by-step instructions for performing specific security tasks

What is a potential consequence of an employee not complying with security policies?

The organization may face increased risk of data breaches and security incidents

The employee will be automatically promoted to a security role

The organization will be exempt from future security audits

The employee may receive a performance bonus for identifying weaknesses

Certified Tester Security Tester

Domain 1Objective 4

Understanding Security Policies and Procedures CT-SEC Practice Questions (Page 1)

Part of the The Basis of Security Testing domain, which makes up ~19% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

Questions 1–5

1foundation · easy
Which of the following is an example of a security tester applying organizational procedures?
Select an answer first
2foundation · easy
How should a security tester align their activities with organizational security policies?
Select an answer first
3foundation · easy
What is the primary purpose of a security policy in an organization?
Select an answer first
4application · easy
A security tester is documenting the steps to perform a vulnerability scan. They write: '1. Log in to the scanner. 2. Select the target. 3. Configure scan options. 4. Run the scan. 5. Save the report.' What type of document is this?
Select an answer first
5foundation · easy
What is a potential consequence of an employee not complying with security policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.