Certified Tester Security Test Engineer
Domain 9Objective 2
Black-Box Security Test Tools CT-STE Practice Questions (Page 5)
Part of the Security Test Tools domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)
32questions here
7free pages
8concepts
Questions 21–25
- 21
What is a common application of network-based black-box security tools?
Select an answer first - 22
Why might a black-box security tool fail to detect a vulnerability that exists in a web application?
Select an answer first - 23
A network team is testing a new IoT device that uses a proprietary protocol over UDP. They want to identify whether the device crashes or misbehaves when receiving unexpected UDP packets. Which tool category should they use?
Select an answer first - 24
A security tester needs to automatically discover common vulnerabilities in a web application by sending crafted HTTP requests. Which category of black-box security test tools is most appropriate?
Select an answer first - 25
Which tool is commonly used for black-box testing of web applications to intercept and modify HTTP requests?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.