When testing an encryption implementation, what is the first step a security tester should take?

Disable encryption to see if the application still works

Replace the encryption with a stronger algorithm

Attempt to brute-force the encryption key

Identify the encryption algorithms and protocols used in the application

Which of the following is an example of a weak key that should be avoided in encryption implementations?

A key that is rotated regularly

A key stored in a hardware security module (HSM)

A key generated from a predictable source, such as a timestamp

What is the main advantage of full-disk encryption (FDE) compared to file-level encryption?

FDE protects all data on the disk, including temporary files and system files, without requiring individual file selection.

FDE is faster than file-level encryption.

FDE provides stronger encryption than file-level encryption.

FDE allows selective encryption of specific files.

A security tester is evaluating a system that uses symmetric encryption to protect data at rest. The tester finds that the encryption key is stored in the same database as the encrypted data. What is the most important recommendation the tester should make?

Encrypt the key with a passphrase and store the passphrase in the application code.

Rotate the encryption key on a regular basis to reduce the impact of a compromise.

Store the encryption key in a separate key management system or hardware security module.

Use a longer encryption key, such as AES-256, to make the encryption stronger.

Which of the following is an example of encryption at rest?

Using TLS to protect data transmitted between a client and server

Hashing passwords before storing them

Using a VPN to secure remote access

Encrypting a database file stored on a hard drive

Certified Tester Security Test Engineer

Domain 2Objective 6

Encryption CT-STE Practice Questions (Page 2)

Part of the Security Test Techniques domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

Questions 6–10

6foundation · easy
When testing an encryption implementation, what is the first step a security tester should take?
Select an answer first
7foundation · easy
Which of the following is an example of a weak key that should be avoided in encryption implementations?
Select an answer first
8foundation · easy
What is the main advantage of full-disk encryption (FDE) compared to file-level encryption?
Select an answer first
9application · medium
A security tester is evaluating a system that uses symmetric encryption to protect data at rest. The tester finds that the encryption key is stored in the same database as the encrypted data. What is the most important recommendation the tester should make?
Select an answer first
10foundation · easy
Which of the following is an example of encryption at rest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.