A security test engineer is analyzing the interface between a web application and a database. The application constructs SQL queries by concatenating user input. What is the most important security test to design for this interface?

Test that the database uses strong passwords

Test for SQL injection by sending malicious input

Test that the application logs all SQL queries

Test that the database is not accessible from the internet

Certified Tester Security Test Engineer

Domain 3Objective 4

Security Test Design at Component Integration Level CT-STE Practice Questions (Page 7)

Part of the The Security Test Process domain, which makes up ~12% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~4–6 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

8 Concepts in This Objective

Security Test Design at Component Integration Level
Integration-Level Threat Modeling
Interface Security Analysis
Security Test Case Derivation for Integration
Component Interaction Security Testing
Integration-Level Security Test Techniques
Prioritization of Integration Security Tests
Traceability of Integration Security Tests

Questions 31–31

31application · medium
A security test engineer is analyzing the interface between a web application and a database. The application constructs SQL queries by concatenating user input. What is the most important security test to design for this interface?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.

Security Test Design at Component Integration Level CT-STE Practice Questions (Page 7)

Questions 31–31

A security test engineer is analyzing the interface between a web application and a database. The application constructs SQL queries by concatenating user input. What is the most important security test to design for this interface?

Keep studying — The Security Test Process