Security Audits and Security Testing CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How do the outcomes of security audits and security testing typically differ?

   • AAudits result in compliance findings, while testing results in vulnerability reports
   • BAudits result in vulnerability reports, while testing results in compliance certificates
   • CAudits are only for external compliance, while testing is only for internal use
   • DBoth produce identical reports
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   During the execution phase of a security audit, the auditor discovers that a critical server does not have the required security patches installed. The auditor has already collected evidence of the missing patches. What is the auditor's NEXT step in the audit process?

   • ADocument the finding and continue collecting evidence on other controls in the audit scope
   • BImmediately install the missing patches on the server to remediate the vulnerability
   • CExclude the finding from the report because the server is not the main focus of the audit
   • DStop the audit and report the finding to management immediately
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which method is commonly used to collect audit evidence?

   • AInterviewing personnel and reviewing documentation
   • BGuessing passwords to test authentication
   • CDeleting logs to test incident response
   • DExploiting vulnerabilities in production systems
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   During a security audit, the auditor needs to verify that the organization's backup process is working. The auditor has reviewed the backup policy and interviewed the IT staff. What additional evidence would STRENGTHEN the audit's conclusion about the backup process?

   • AChecking the backup software vendor's website for product documentation
   • BInterviewing the IT staff a second time to confirm their statements
   • CReviewing the backup policy document again for accuracy
   • DTesting a sample of backups by restoring them to a test environment
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security auditor is evaluating the effectiveness of an organization's access control policy. To gather reliable evidence, the auditor needs to verify that user permissions match the policy. Which evidence collection method is MOST appropriate for this task?

   • AInterviewing the IT manager about how access control is generally handled
   • BReviewing a sample of user account configurations and comparing them to the access control policy
   • CPerforming a penetration test to see if unauthorized access is possible
   • DReviewing the access control policy document itself
   Reveal Solution Discussion Select an answer first