Considerations for Selecting Tools CT-STE Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A company is considering a commercial DAST tool. The license is priced per concurrent scan, and the vendor offers a premium support contract at an additional cost. The company plans to run scans only during a few peak periods each year. What is the most cost-effective licensing model for this usage pattern?

   • AA free community edition that lacks support and advanced features.
   • BA perpetual license with a separate annual maintenance fee.
   • CAn annual subscription with unlimited scans.
   • DA pay-as-you-go model where they pay only for the scans they run.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security team is selecting a new penetration testing tool. Tool A is open-source with a very active community and frequent updates. Tool B is commercial with a lower upfront cost but a history of slow updates and a small user base. The team has the skills to use both tools. What is the most important factor in this decision?

   • AThe ease of use of Tool B, as it may reduce the training burden.
   • BThe lower upfront cost of Tool B, as it fits the immediate budget.
   • CThe specific features of each tool, as functionality is the primary concern.
   • DThe active community and frequent updates of Tool A, as it indicates a healthy and evolving tool.
   Reveal Solution Discussion Select an answer first