Which statement best describes the relationship between acceptance criteria and security requirements?

Security requirements are derived from acceptance criteria after testing is complete

Acceptance criteria replace security requirements once testing begins

Acceptance criteria are derived from security requirements and define the conditions that verify those requirements

Acceptance criteria and security requirements are independent and unrelated

How do test conditions relate to acceptance criteria in security testing?

Test conditions are independent of acceptance criteria

Test conditions are only used for functional testing, not security testing

Test conditions are derived from acceptance criteria to enable verification

Test conditions replace acceptance criteria during test execution

A security test team is planning a test for a new payment processing system. They need to define acceptance criteria. Which source should they prioritize to ensure the criteria align with legal obligations?

The internal development team's coding style guide.

The project manager's personal risk tolerance.

The PCI DSS requirements applicable to cardholder data.

The latest industry blog on security testing trends.

Which of the following is NOT a typical source of acceptance criteria for security testing?

Security requirements specification

Regulatory compliance requirements

A competitor's product brochure

Which of the following is an example of a well-written acceptance criterion?

The login function must reject passwords that are less than 8 characters

The system should not have any vulnerabilities

Certified Tester Security Test Engineer

Domain 7Objective 1

Acceptance Criteria for Security Testing CT-STE Practice Questions (Page 2)

Part of the Security Testing as Part of an Information Security Management System domain, which makes up ~8% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

Questions 6–10

6foundation · easy
Which statement best describes the relationship between acceptance criteria and security requirements?
Select an answer first
7foundation · easy
How do test conditions relate to acceptance criteria in security testing?
Select an answer first
8application · medium
A security test team is planning a test for a new payment processing system. They need to define acceptance criteria. Which source should they prioritize to ensure the criteria align with legal obligations?
Select an answer first
9foundation · easy
Which of the following is NOT a typical source of acceptance criteria for security testing?
Select an answer first
10foundation · easy
Which of the following is an example of a well-written acceptance criterion?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.