A security patch was applied to an authentication module to fix a session-fixation vulnerability. The developer has just committed the fix. The security team has a limited test window before the release. What should the team do FIRST to verify the fix?

Execute a confirmation test that reproduces the original session-fixation attack and verifies it is no longer successful.

Review the code changes manually and skip testing if the fix looks correct.

Deploy the fix to production and monitor for security incidents.

Run the full security regression suite to ensure no other security controls were broken.

Certified Tester Security Test Engineer

Domain 6Objective 4

Security Regression Testing and Confirmation Testing CT-STE Practice Questions (Page 7)

Part of the Adjusting to Software Development Lifecycle Models domain, which makes up ~9% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

8 Concepts in This Objective

Security Regression Testing Definition
Security Confirmation Testing Definition
Distinguishing Regression and Confirmation Testing
Selecting Security Regression Test Cases
Automating Security Regression Tests
Executing Security Regression and Confirmation Tests
Analyzing and Reporting Results
Integrating with Development Lifecycle

Questions 31–31

31application · medium
A security patch was applied to an authentication module to fix a session-fixation vulnerability. The developer has just committed the fix. The security team has a limited test window before the release. What should the team do FIRST to verify the fix?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.

Security Regression Testing and Confirmation Testing CT-STE Practice Questions (Page 7)

Questions 31–31

A security patch was applied to an authentication module to fix a session-fixation vulnerability. The developer has just committed the fix. The security team has a limited test window before the release. What should the team do FIRST to verify the fix?

Keep studying — Adjusting to Software Development Lifecycle Models