A security team is selecting a tool to identify security vulnerabilities in the source code of a large microservices application. The team wants the tool to be able to trace data from user inputs to sensitive functions, such as database queries and file operations, to identify injection and path traversal flaws. Which tool feature is most important for this requirement?

Integration with runtime application self-protection (RASP) agents.

Ability to perform authenticated scans against a running application.

Support for fuzzing network protocols.

Taint analysis capability that tracks untrusted data through the code.

Certified Tester Security Test Engineer

Domain 2Objective 2

Static and Dynamic Security Testing CT-STE Practice Questions (Page 5)

Part of the Security Test Techniques domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

8concepts

Questions 21–21

21application · medium
A security team is selecting a tool to identify security vulnerabilities in the source code of a large microservices application. The team wants the tool to be able to trace data from user inputs to sensitive functions, such as database queries and file operations, to identify injection and path traversal flaws. Which tool feature is most important for this requirement?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.

Static and Dynamic Security Testing CT-STE Practice Questions (Page 5)

Questions 21–21

Keep studying — Security Test Techniques