Why is it important for employees to adhere to security policies?

To reduce the risk of security incidents and protect organizational assets

To satisfy the requirements of external auditors only

To avoid legal penalties that are always imposed for non-compliance

To ensure that security testing is performed regularly

A security tester is planning to perform a password-cracking test on the company's authentication system. Before proceeding, they review the organization's security documentation. Which document is most likely to contain the specific rule that defines the minimum password length and complexity requirements?

The incident response procedure

Which of the following is an example of a security procedure?

To reset a forgotten password, the user must contact the help desk, verify identity with a one-time code, and then set a new password

All employees must use strong passwords for their accounts

The organization must protect customer data from unauthorized access

The company will invest in security awareness training each year

Which of the following best describes the role of a security policy in an organization?

It is a legal contract between the organization and its customers regarding data handling

It defines the organization's security objectives and the rules that employees must follow

It is a technical tool that automatically enforces security controls on all systems

It provides a detailed checklist for configuring firewalls and intrusion detection systems

Certified Tester Security Tester

Domain 1Objective 4

Understanding Security Policies and Procedures CT-SEC Practice Questions (Page 3)

Part of the The Basis of Security Testing domain, which makes up ~19% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

Questions 11–15

11foundation · easy
Why is it important for employees to adhere to security policies?
Select an answer first
12application · easy
A security tester is planning to perform a password-cracking test on the company's authentication system. Before proceeding, they review the organization's security documentation. Which document is most likely to contain the specific rule that defines the minimum password length and complexity requirements?
Select an answer first
13application · easy
A security tester is preparing to test the organization's incident response process. They need to understand the rules for how incidents should be classified and escalated. Which type of security policy should they consult?
Select an answer first
14foundation · easy
Which of the following is an example of a security procedure?
Select an answer first
15foundation · easy
Which of the following best describes the role of a security policy in an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Understanding Security Policies and Procedures CT-SEC Practice Questions (Page 3)

Questions 11–15

Why is it important for employees to adhere to security policies?

A security tester is preparing to test the organization's incident response process. They need to understand the rules for how incidents should be classified and escalated. Which type of security policy should they consult?

Which of the following is an example of a security procedure?

Which of the following best describes the role of a security policy in an organization?

Keep studying — The Basis of Security Testing