Recertification Testing and Reconciliation Testing CT-STE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security team is planning reconciliation testing for a large environment of 500 servers. The team has a documented baseline, but the baseline was last updated six months ago. Since then, several legitimate configuration changes were made and approved, but the baseline was not updated. The team wants to identify any unauthorized deviations. What is the most appropriate approach?

   • APerform recertification testing instead of reconciliation testing
   • BUpdate the baseline to reflect the approved changes before performing the reconciliation
   • CPerform the reconciliation without a baseline and manually review each server
   • DUse the existing baseline as-is and report all deviations as unauthorized
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What should be included in the report of recertification testing findings?

   • AA list of all user passwords
   • BThe results of each test and a recommendation for certification status
   • CThe names of all employees involved in the testing
   • DA detailed cost analysis of the testing effort
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security team is executing reconciliation testing on a set of network devices after a configuration change. The team has the documented baseline and has collected the current configuration from all devices. What should the team do next?

   • ARe-run the security tests from the original certification
   • BCompare the current configurations to the baseline and identify any deviations
   • CUpdate the baseline to match the current configuration
   • DReport the findings to the security manager
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A security manager is deciding between recertification testing and reconciliation testing for a system that recently underwent a major upgrade. The upgrade changed the system's authentication logic and also modified several configuration files. The manager wants to ensure that the system still meets its security certification criteria and that the configuration is consistent with the baseline. Which approach is most appropriate?

   • APerform both recertification testing and reconciliation testing
   • BPerform only reconciliation testing, as it covers both configuration and security functionality
   • CPerform either recertification or reconciliation testing, as they are interchangeable
   • DPerform only recertification testing, as it covers both security functionality and configuration
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which event would most likely trigger reconciliation testing?

   • AA patch deployment that modifies system configuration files
   • BA scheduled backup of the database
   • CA user changes their profile picture
   • DA new employee is onboarded
   Reveal Solution Discussion Select an answer first