System Testing and Acceptance Testing CT-STE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a typical outcome of a successful acceptance security test?

   • AA performance benchmark for the system
   • BA list of security defects to be fixed
   • CStakeholder sign-off that the system meets security requirements
   • DA detailed report of component-level test results
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the main goal of executing acceptance security tests?

   • ATo find as many security defects as possible
   • BTo measure the system's performance under load
   • CTo demonstrate compliance with security requirements and obtain stakeholder sign-off
   • DTo test individual security components in isolation
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security test engineer is planning system-level tests for a new online banking application. The application integrates with a core banking system and a fraud detection service. The engineer needs to verify that the system can withstand a distributed denial-of-service (DDoS) attack on the public-facing web server while maintaining the ability to process legitimate transactions. Which security test objective is most relevant for this system-level test?

   • AVerifying the system's resilience and availability under attack conditions.
   • BValidating that the system's user interface is accessible to all users.
   • CEnsuring that the system's code is free of syntax errors.
   • DConfirming that the system meets the performance requirements of the service level agreement.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In acceptance testing, what is the primary focus regarding security?

   • ATesting individual security components in isolation
   • BValidating that security requirements are acceptable to stakeholders
   • CMeasuring the system's resilience to attacks
   • DFinding security defects in the integrated system
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security test engineer is conducting system-level security tests for a new IoT platform that connects smart home devices to a cloud backend. The system includes a mobile app, a cloud API, and device firmware. The engineer has identified a vulnerability in the device firmware that allows an attacker to inject malicious commands. The engineer must decide how to handle this finding during the evaluation of system test results. Which of the following is the most appropriate action?

   • AAsk the firmware developers to fix the vulnerability without documenting it.
   • BRecommend deploying the system because the cloud backend is secure.
   • CReport the vulnerability and assess its impact on the overall security of the IoT platform.
   • DIgnore the vulnerability because it is in the firmware, not the cloud backend.
   Reveal Solution Discussion Select an answer first