Security Audits and Security Testing CT-STE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which security testing technique involves actively exploiting vulnerabilities to assess impact?

   • AConfiguration review
   • BVulnerability scanning
   • CCode review
   • DPenetration testing
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the main purpose of the reporting phase in a security audit?

   • ATo define the audit scope and objectives
   • BTo communicate audit findings and recommendations to stakeholders
   • CTo implement corrective actions for identified issues
   • DTo exploit vulnerabilities discovered during the audit
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is a key characteristic of reliable audit evidence?

   • AIt is collected only from external sources
   • BIt is sufficient, appropriate, and verifiable
   • CIt is always quantitative
   • DIt is based on assumptions and opinions
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which element is essential to define before starting a security audit?

   • AThe specific vulnerabilities to be exploited during the audit
   • BThe budget for purchasing new security tools
   • CThe list of all employees' passwords
   • DThe audit scope, objectives, and criteria
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary purpose of defining audit criteria in a security audit?

   • ATo select the tools used for penetration testing
   • BTo determine the exact number of vulnerabilities in the system
   • CTo assign blame for security incidents
   • DTo provide a benchmark against which the organization's security posture is evaluated
   Reveal Solution Discussion Select an answer first