Certified Tester Security Test Engineer
Domain 4Objective 2
Industry Standards for Security Testing CT-STE Practice Questions (Page 3)
Part of the Standards and Best Practices domain, which makes up ~10% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)
15questions here
3free pages
4concepts
Questions 11–15
- 11
According to the OWASP Web Security Testing Guide (WSTG), which testing activity is directly mapped to the requirement of identifying and testing authentication mechanisms?
Select an answer first - 12
A financial services company must demonstrate to an auditor that its web application development lifecycle includes security testing aligned with a recognized industry standard. The team already uses OWASP ASVS for requirements. Which additional standard should the team map its testing activities to in order to satisfy the auditor's request for an organizational-level security management framework?
Select an answer first - 13
A security test engineer is working on a project for a client that requires testing to be aligned with a standard that focuses on the most critical security risks to web applications. The client wants a quick, high-level assessment to identify the most prevalent vulnerabilities. Which standard should the engineer use?
Select an answer first - 14
A security test engineer is planning a penetration test for a web application that processes credit card payments. The organization must demonstrate compliance with the payment card industry standard. Which standard's requirements should the engineer map the testing activities to?
Select an answer first - 15
A security test engineer is asked to recommend a widely recognized standard that provides a comprehensive set of testing techniques and checklists specifically for web application security. Which standard should they recommend?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to CT-STE
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.