System Testing and Acceptance Testing CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which type of test is typically executed during system security testing?

   • AA test that confirms stakeholders accept the system's security
   • BA test that verifies the system's ability to resist a denial-of-service attack
   • CA test that reviews the system's code for vulnerabilities
   • DA test that checks a single authentication module
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security test engineer is evaluating the results of acceptance tests for a new human resources system. The acceptance criteria include that all employee data must be encrypted at rest and that access to the data must be logged. The tests have been executed, and the results show that encryption is working correctly, but the logging is incomplete for some access events. What should the engineer conclude about the system's readiness for deployment?

   • AThe system is ready for deployment because the logging issue is minor.
   • BThe system is not ready for deployment because the acceptance criteria are not fully met.
   • CThe system is ready for deployment if the stakeholders accept the logging issue.
   • DThe system is ready for deployment because the encryption requirement is met.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   After executing system-level security tests on a new online banking platform, a security test engineer has identified a critical vulnerability in the session management component. The vulnerability allows an attacker to hijack a user's session. The engineer needs to evaluate the test results to determine the overall security readiness of the system. Which of the following is the most appropriate action?

   • AImmediately deploy the system to production because the vulnerability is only in the session management component.
   • BIgnore the vulnerability because it was not part of the original test scope.
   • CReport the vulnerability and assess its impact on the system's overall security posture.
   • DAsk the developers to fix the vulnerability without documenting it.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of evaluating system security test results?

   • ATo identify defects and assess the system's overall security readiness
   • BTo measure the system's performance under load
   • CTo obtain stakeholder sign-off for deployment
   • DTo verify that individual components work correctly
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A government agency has contracted a vendor to develop a new citizen portal. The security requirements include multi-factor authentication for all users and encryption of personal data in transit. The agency's security team wants to formally verify that these requirements are met and acceptable before the portal goes live. Which testing activity should the team conduct?

   • AUnit testing, to verify that each component implements the security requirements correctly.
   • BPenetration testing, to identify exploitable vulnerabilities in the system.
   • CSystem testing, to verify the integrated system's behavior under load.
   • DAcceptance testing, with the agency's stakeholders defining and validating acceptance criteria.
   Reveal Solution Discussion Select an answer first