Security Test Design at Component Integration Level CT-STE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which attack vector is most likely to be identified during integration-level threat modeling?

   • AAn attacker guessing a user's password to gain access to the system
   • BAn attacker exploiting a buffer overflow in a standalone application
   • CAn attacker exploiting a vulnerability in a single component's internal logic
   • DAn attacker intercepting and modifying data as it passes between two components
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security test engineer is creating integration-level security test cases for a new microservices architecture. The team has a threat model that identifies a specific threat of data tampering between services. What is the most important action to ensure traceability?

   • AReview test cases with the development team
   • BTag each test case with the ID of the threat it addresses
   • CWrite test cases that cover all possible attack vectors
   • DUse a test management tool to store test cases
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   During integration testing of a web application with a backend database, the team discovers that when the database returns an error, the application displays the full SQL query in the response. What is the most appropriate security test case to derive from this finding?

   • ATest that the database is not accessible from the internet
   • BTest that the application returns a generic error message to the user
   • CVerify that the SQL query is parameterized
   • DVerify that the application logs the error without exposing it to the user
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary basis for prioritizing security tests at the integration level?

   • AThe number of lines of code in each component
   • BRisk assessment
   • CThe order in which components were developed
   • DThe alphabetical order of component names
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary focus of security testing at the component integration level?

   • AValidating the security of individual components in isolation
   • BEnsuring the overall system meets functional requirements
   • CVerifying the secure interaction and data exchange between integrated components
   • DTesting the security of the final deployed system in production
   Reveal Solution Discussion Select an answer first