Recertification Testing and Reconciliation Testing CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement correctly describes the scope of reconciliation testing compared to recertification testing?

   • AReconciliation testing typically has a narrower scope, focusing on configuration items and controls
   • BBoth have exactly the same scope and objectives
   • CReconciliation testing is always broader than recertification testing
   • DReconciliation testing covers the entire system's security requirements
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security administrator discovers that a firewall rule was unintentionally modified during a routine maintenance window, deviating from the approved baseline. The change was not documented. The administrator needs to verify that the current configuration matches the intended baseline and identify any other unauthorized deviations. Which action should the administrator take?

   • APerform recertification testing to revalidate the firewall's security certification
   • BPerform reconciliation testing to compare the current firewall configuration against the documented baseline
   • CReview the firewall logs to identify who made the change
   • DRestore the firewall configuration from the last known good backup
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company's web application was certified against a set of security requirements a year ago. Since then, the application has undergone several minor updates. The security team is now executing recertification testing. What should the team do during the execution phase?

   • AReview the change logs to identify what has changed since certification
   • BUpdate the certification criteria to reflect the new changes
   • CRe-run the security tests that are relevant to the certification criteria
   • DCompare the current configuration against the original baseline
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of recertification testing?

   • ATo validate that all security controls are implemented correctly in a new system
   • BTo test new features for the first time before they are deployed
   • CTo compare the current configuration against a documented baseline to identify drift
   • DTo verify that a previously certified system still meets security requirements after changes
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which scenario best illustrates the need for recertification testing?

   • AA routine backup is performed on the system
   • BThe system's performance is slower than expected
   • CA user reports a minor display issue in the user interface
   • DA system undergoes a major upgrade to its authentication module
   Reveal Solution Discussion Select an answer first