A security test engineer is designing test data for a search feature that is vulnerable to SQL injection. The threat model indicates that the application uses parameterized queries, but the engineer wants to verify this. Which test data set is most effective for this purpose?

A set of valid search terms to verify normal functionality.

A set of random strings to test error handling.

A set of Unicode characters to test encoding issues.

A set of SQL injection payloads that are known to bypass parameterized queries.

A security test engineer is setting up a test environment to perform penetration testing on a web application. The environment must be isolated from the production network to prevent any impact on live systems. Which configuration is most appropriate?

Use a development environment that is not isolated.

Use a production-like environment on a separate network segment with no route to production.

Use a virtual machine on the same network as production but with a firewall.

Use the production environment but with test accounts.

A security test engineer is documenting test cases for a new feature. The risk analysis identified a risk of cross-site scripting in the comment section. The engineer wants to ensure that the test case can be traced back to this risk. What should the engineer do?

Store the test case in a separate folder for security tests.

Add a reference to the risk ID in the test case description.

Include the test case in the test plan without additional details.

A threat model for a healthcare application identified a threat of unauthorized data access via a broken access control in the API. The test team has limited time and must choose between two test approaches: performing a comprehensive access control test on the API or conducting a broader security test that includes other vulnerabilities. The risk analysis shows that broken access control is the highest risk. What should the test engineer do?

Perform the comprehensive access control test on the API because it directly addresses the highest risk.

Conduct the broader security test to cover more vulnerabilities.

Split the time equally between both approaches.

Skip the API test and test other features that are easier.

Which of the following is an example of security test data that reflects a realistic attack pattern?

A string containing SQL injection syntax such as ' OR '1'='1

A standard user name and password combination

A random sequence of alphanumeric characters

Certified Tester Security Test Engineer

Domain 2Objective 3

Addressing Security Risks in Test Design CT-STE Practice Questions (Page 4)

Part of the Security Test Techniques domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

10concepts

Questions 16–20

16expert · medium
A security test engineer is designing test data for a search feature that is vulnerable to SQL injection. The threat model indicates that the application uses parameterized queries, but the engineer wants to verify this. Which test data set is most effective for this purpose?
Select an answer first
17application · medium
A security test engineer is setting up a test environment to perform penetration testing on a web application. The environment must be isolated from the production network to prevent any impact on live systems. Which configuration is most appropriate?
Select an answer first
18application · medium
A security test engineer is documenting test cases for a new feature. The risk analysis identified a risk of cross-site scripting in the comment section. The engineer wants to ensure that the test case can be traced back to this risk. What should the engineer do?
Select an answer first
19expert · medium
A threat model for a healthcare application identified a threat of unauthorized data access via a broken access control in the API. The test team has limited time and must choose between two test approaches: performing a comprehensive access control test on the API or conducting a broader security test that includes other vulnerabilities. The risk analysis shows that broken access control is the highest risk. What should the test engineer do?
Select an answer first
20foundation · easy
Which of the following is an example of security test data that reflects a realistic attack pattern?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.