Considerations for Selecting Tools CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Why is vendor support an important factor when selecting a security test tool?

   • AIt ensures the tool is compatible with all operating systems
   • BIt guarantees the tool will find all security vulnerabilities
   • CIt provides a source of help when issues arise and ensures the tool remains usable
   • DIt eliminates the need for internal security expertise
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security team is comparing two DAST tools. Tool A is open-source and free to use. Tool B is commercial and requires a yearly subscription. The team has the expertise to configure and maintain open-source tools. What is a key consideration when evaluating the total cost of ownership (TCO) for Tool A?

   • AThe cost of the hardware required to run the tool.
   • BThe cost of the commercial support contract.
   • CThe cost of the license for each developer using the tool.
   • DThe cost of internal staff time for setup, configuration, and ongoing maintenance.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A large enterprise is introducing a new, powerful SAST tool. The security team is proficient, but the development teams who will use the tool are not. The tool has a steep learning curve and complex configuration. What is the most important factor for the successful adoption of this tool?

   • AThe tool's raw scanning speed and ability to analyze large codebases quickly.
   • BThe provision of comprehensive training and ongoing support for the development teams.
   • CThe tool's ability to integrate with the existing IDE and CI/CD pipeline.
   • DThe tool's ability to generate detailed reports for management.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is evaluating two SAST tools. Tool A has a lower license cost but requires a dedicated server and significant configuration effort. Tool B has a higher license cost but is offered as a fully managed SaaS solution. The company has limited IT staff and wants to minimize operational overhead. What is the most important factor in this decision?

   • AThe total cost of ownership, which includes the operational overhead of managing Tool A.
   • BThe higher license cost of Tool B, as it may not fit the budget.
   • CThe specific features of each tool, as functionality is the primary concern.
   • DThe lower license cost of Tool A, as it reduces the initial capital expenditure.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A team is evaluating a new dynamic application security testing (DAST) tool. Which of the following is an example of a functionality criterion?

   • AThe tool's license cost fits the project budget
   • BThe vendor provides 24/7 phone support
   • CThe tool runs on the team's Linux CI servers
   • DThe tool supports authentication flows and session handling
   Reveal Solution Discussion Select an answer first