A developer is testing a custom network service that parses XML data. The developer wants to discover whether the service is vulnerable to XML entity expansion attacks. Which black-box testing approach is most appropriate?

Run a port scanner against the service

Send XML payloads with deeply nested entities to the service

Use a web application scanner on the service's HTTP interface

Perform a dictionary attack on the service's authentication

A small security team has a limited budget and needs to assess both a web application and the network services around it. They have no commercial tool licenses. Which approach is most cost-effective while still covering both targets?

Hire an external penetration testing firm

Purchase a single commercial suite that covers both

Use open-source web scanners and network scanners

What is the primary function of web application security tools like OWASP ZAP in black-box testing?

To perform network-level port scanning and service enumeration

To crack password hashes extracted from web applications

To scan web applications for vulnerabilities such as SQL injection and XSS

To analyze binary executables for malware

A security team is scanning a production web application with a vulnerability scanner. The scanner reports a high number of 'potential' issues, but the team suspects many are false positives because the application uses a custom framework. The team has a limited budget and must prioritize manual review. What is the most effective strategy?

Manually review every scanner finding

Re-run the scanner with a different tool to cross-check

Ignore all scanner findings and rely on manual testing

Prioritize manual review of issues that the scanner flagged as 'confirmed' or 'high confidence'

A security analyst is testing a file-upload feature in a web application. The application accepts PDF files and processes them server-side. The analyst wants to discover vulnerabilities in the PDF parser without modifying the application's source code. Which black-box technique is most appropriate?

Running a network sniffer during upload

Port scanning the web server for other services

File-format fuzzing with mutated PDF samples

SQL injection testing on the upload form

Certified Tester Security Test Engineer

Domain 9Objective 2

Black-Box Security Test Tools CT-STE Practice Questions (Page 6)

Part of the Security Test Tools domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

Questions 26–30

26application · medium
A developer is testing a custom network service that parses XML data. The developer wants to discover whether the service is vulnerable to XML entity expansion attacks. Which black-box testing approach is most appropriate?
Select an answer first
27application · medium
A small security team has a limited budget and needs to assess both a web application and the network services around it. They have no commercial tool licenses. Which approach is most cost-effective while still covering both targets?
Select an answer first
28foundation · easy
What is the primary function of web application security tools like OWASP ZAP in black-box testing?
Select an answer first
29expert · hard
A security team is scanning a production web application with a vulnerability scanner. The scanner reports a high number of 'potential' issues, but the team suspects many are false positives because the application uses a custom framework. The team has a limited budget and must prioritize manual review. What is the most effective strategy?
Select an answer first
30application · medium
A security analyst is testing a file-upload feature in a web application. The application accepts PDF files and processes them server-side. The analyst wants to discover vulnerabilities in the PDF parser without modifying the application's source code. Which black-box technique is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.