Recertification Testing and Reconciliation Testing CT-STE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which activity is an example of reconciliation testing?

   • AComparing the current firewall rules to the approved rule set
   • BPerforming a penetration test to exploit a vulnerability
   • CRunning a vulnerability scan on the network
   • DReviewing the system's audit logs for suspicious activity
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which tool or technique is commonly used during reconciliation testing execution?

   • ALoad testing tools
   • BConfiguration management database (CMDB) comparison
   • CSocial engineering simulations
   • DPenetration testing framework
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security team is deciding between two testing activities. Activity 1: re-running a set of security tests to confirm that a system still meets the security requirements defined in its original certification. Activity 2: comparing the current configuration of the system against a documented security baseline to identify any drift. Which statement correctly describes the difference between these two activities?

   • AActivity 1 is reconciliation testing; Activity 2 is recertification testing
   • BActivity 1 is recertification testing; Activity 2 is reconciliation testing
   • CBoth activities are forms of recertification testing
   • DBoth activities are forms of reconciliation testing
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a typical trigger for recertification testing?

   • AA user changes their password
   • BA new employee is hired
   • CA scheduled annual review required by organizational policy
   • DThe system is backed up
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security manager is reviewing two testing activities. Activity A is triggered by a major system upgrade and involves re-running security tests to confirm the system still meets its certification criteria. Activity B is triggered by a configuration change and involves comparing the current configuration to the documented baseline. Which statement accurately describes the relationship between these activities?

   • AActivity A is recertification testing, and Activity B is reconciliation testing
   • BActivity A is reconciliation testing, and Activity B is recertification testing
   • CBoth activities are forms of reconciliation testing
   • DBoth activities are forms of recertification testing
   Reveal Solution Discussion Select an answer first