Certified Tester Security Tester
Domain 9Objective 5
Where to Learn of Industry Trends in Information Security CT-SEC Practice Questions (Page 5)
Part of the Standards and Industry Trends domain, which makes up ~11% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)
29questions here
6free pages
5concepts
Questions 21–25
- 21
Which regulation is specifically designed to protect the privacy and personal data of individuals in the European Union?
Select an answer first - 22
A security testing firm that handles data for clients in the European Union is updating its testing methodologies. A new regulation has come into effect that imposes stricter requirements for reporting personal data breaches to supervisory authorities. The firm must ensure its testing procedures verify compliance with this regulation. Which regulation is the firm primarily concerned with?
Select an answer first - 23
Which organization is best known for publishing the OWASP Top 10, a widely referenced list of web application security risks?
Select an answer first - 24
During a security assessment, a tester discovers a new type of attack that exploits a weakness in how a web application handles multipart form data, allowing an attacker to bypass the input validation. The tester wants to document this in the report and reference a recognized industry source that tracks such attack patterns. Which source is the best reference for this attack pattern?
Select an answer first - 25
Which organization is a U.S. federal agency that publishes cybersecurity standards and guidelines, including the Cybersecurity Framework and NIST Special Publications?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.