Addressing Security Risks in Test Design CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary consideration when selecting test data for security testing?

   • AThe data should reflect realistic attack patterns and malicious inputs.
   • BThe data should be randomly generated without any specific pattern.
   • CThe data should be identical to production data to ensure accuracy.
   • DThe data should be limited to valid inputs to avoid false positives.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a benefit of incorporating security into test design documents?

   • AIt eliminates the need for security testing tools.
   • BIt guarantees that all security vulnerabilities will be found.
   • CIt reduces the total number of test cases needed.
   • DIt ensures that security testing is considered from the beginning of the test design process.
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A security test engineer is planning a security test for a new web application. The risk analysis identified two high risks: a high-likelihood, medium-impact risk in the login page and a medium-likelihood, high-impact risk in the admin panel. The engineer has limited time and must choose which risk to test first. The engineer decides to test the login page risk first. What is the most likely reason for this decision?

   • AThe login page is more accessible to attackers, so it has a larger attack surface.
   • BThe login page risk has a higher likelihood, so it is more likely to be exploited.
   • CThe engineer calculated the risk score and found the login page risk to be higher.
   • DThe engineer has more test data for the login page.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of deriving measurable security test objectives from identified risks and security requirements?

   • ATo create a list of all possible vulnerabilities in the system.
   • BTo document the test environment configuration.
   • CTo provide clear, verifiable targets for security testing that can be assessed objectively.
   • DTo replace the need for security requirements in the project.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary basis for prioritizing security tests?

   • AThe complexity of the test cases.
   • BThe order in which requirements were defined.
   • CThe risk level, including likelihood and impact.
   • DThe number of testers available.
   Reveal Solution Discussion Select an answer first