At which stage of the security testing process are acceptance criteria typically defined?

During test planning, before execution begins

During test closure, after the final report

During test execution, as results come in

During test reporting, after execution is complete

How are acceptance criteria used in the reporting phase of security testing?

They are used to calculate the test budget

They are used to select the test tools

They are used to assign testers to tasks

They provide the basis for stating whether the system meets the security requirements

How are acceptance criteria used to verify that security testing objectives have been achieved?

By counting the number of test cases executed

By ensuring all test cases pass, regardless of criteria

By asking stakeholders if they feel the system is secure

By comparing test results against the acceptance criteria to determine if they are met

A security test team is evaluating acceptance criteria for a new encryption feature. Which criterion is the most measurable?

Data must be encrypted to protect it from unauthorized access.

The encryption should be strong enough to prevent hacking.

Data at rest must be encrypted using AES-256, verified by inspecting the configuration and attempting to read a sample file without the key.

Encryption must be applied to all sensitive data.

What is the primary difference between acceptance criteria and test conditions?

Acceptance criteria are only for security testing, while test conditions are for all testing

Acceptance criteria are written after testing, while test conditions are written before

Acceptance criteria define the conditions for acceptance, while test conditions describe what is to be tested

Acceptance criteria are the same as test conditions

Certified Tester Security Test Engineer

Domain 7Objective 1

Acceptance Criteria for Security Testing CT-STE Practice Questions (Page 4)

Part of the Security Testing as Part of an Information Security Management System domain, which makes up ~8% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

Questions 16–20

16foundation · easy
At which stage of the security testing process are acceptance criteria typically defined?
Select an answer first
17foundation · easy
How are acceptance criteria used in the reporting phase of security testing?
Select an answer first
18foundation · easy
How are acceptance criteria used to verify that security testing objectives have been achieved?
Select an answer first
19application · medium
A security test team is evaluating acceptance criteria for a new encryption feature. Which criterion is the most measurable?
Select an answer first
20foundation · easy
What is the primary difference between acceptance criteria and test conditions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.