ISTQB Security Test Process CT-STE Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   After a security test project, the test manager wants to improve future security testing efforts. Which closure activity would best support this goal?

   • ADocument lessons learned and update the organization's security test process
   • BSend a thank-you note to the test team
   • CClose the project and move on without further analysis
   • DArchive all test data and delete it after a year
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   After completing a security test project, the test manager is reviewing the closure report. The report includes a summary of findings and recommendations. What additional element is important for the closure report to be effective?

   • AA copy of all test data used during testing
   • BA comparison of the test results against the defined security objectives
   • CA list of all testers who participated in the project
   • DA detailed timeline of when each test case was executed
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of evaluating security test results?

   • ATo plan future security testing activities
   • BTo determine whether vulnerabilities exist and their potential impact
   • CTo execute additional security tests
   • DTo design new security test cases
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company is integrating security testing into its agile development process. The team wants to ensure that security testing is not a separate phase but is woven into the overall test process. Which approach aligns with the ISTQB security test process?

   • AUse only automated security tools and skip manual testing
   • BPerform security testing activities in parallel with functional testing throughout the development lifecycle
   • CConduct security testing only after the system is fully developed
   • DHave developers perform security testing without a formal process
   Reveal Solution Discussion Select an answer first