What does traceability between integration security tests and threats help to demonstrate?

That the tests are written in a specific language

That the tests are executed quickly

That each identified threat has been addressed by at least one test

What is a misuse case in the context of integration-level security testing?

A use case that describes how an attacker might exploit the system

A test case that verifies the system's normal functionality

A test case that verifies the system's user interface

A test case that checks the system's performance under load

Which factor should be considered when prioritizing integration-level security tests?

The color of the component icons in the architecture diagram

The number of developers on the team

The criticality of the integrated components

A company is integrating a new single sign-on (SSO) system with multiple internal applications. The SSO system will handle authentication for all applications. The team has limited security testing resources. What is the most important factor to consider when defining the scope of security testing for this integration?

The criticality of the SSO system as a central authentication point

The ease of use of the SSO system for end users

The number of applications integrated with the SSO system

Which document is most useful for deriving security test cases that target interface vulnerabilities?

The system's marketing brochure

Certified Tester Security Test Engineer

Domain 3Objective 4

Security Test Design at Component Integration Level CT-STE Practice Questions (Page 6)

Part of the The Security Test Process domain, which makes up ~12% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~4–6 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

8 Concepts in This Objective

Security Test Design at Component Integration Level
Integration-Level Threat Modeling
Interface Security Analysis
Security Test Case Derivation for Integration
Component Interaction Security Testing
Integration-Level Security Test Techniques
Prioritization of Integration Security Tests
Traceability of Integration Security Tests

Questions 26–30

26foundation · easy
What does traceability between integration security tests and threats help to demonstrate?
Select an answer first
27foundation · easy
What is a misuse case in the context of integration-level security testing?
Select an answer first
28foundation · easy
Which factor should be considered when prioritizing integration-level security tests?
Select an answer first
29expert · hard
A company is integrating a new single sign-on (SSO) system with multiple internal applications. The SSO system will handle authentication for all applications. The team has limited security testing resources. What is the most important factor to consider when defining the scope of security testing for this integration?
Select an answer first
30foundation · easy
Which document is most useful for deriving security test cases that target interface vulnerabilities?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.