System Testing and Acceptance Testing CT-STE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which element is essential to include in a plan for system security tests?

   • AThe specific code changes to be reviewed
   • BThe list of stakeholders who will sign off on the system
   • CThe user acceptance criteria for the system
   • DA description of the integrated test environment
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security test engineer is planning acceptance tests for a new cloud-based document management system. The stakeholders include the legal department, which requires that all documents be encrypted at rest, and the IT department, which wants to minimize the cost of the solution. The engineer must define acceptance criteria that satisfy both stakeholders. Which of the following is the most appropriate acceptance criterion?

   • AThe system must be able to encrypt documents, but the encryption method can be chosen by the IT department.
   • BThe system must use a private cloud to ensure encryption, even if it is more expensive.
   • CAll documents must be encrypted at rest using a recognized encryption standard, and the system must demonstrate this during acceptance testing.
   • DThe system must use the cheapest encryption method available, regardless of its strength.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary focus of system testing when applied to a security context?

   • AConfirming that stakeholders accept the system
   • BTesting the end-to-end behavior of the complete integrated system
   • CVerifying individual security functions in isolation
   • DChecking that code changes do not introduce new vulnerabilities
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a security-specific objective of system testing?

   • AEnsuring that each security component is tested in isolation
   • BConfirming that stakeholders accept the system's security posture
   • CVerifying that security functions operate correctly in the complete system
   • DValidating that the system meets contractual security requirements
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What does executing system security tests involve?

   • ATesting functional and non-functional security aspects in the integrated environment
   • BDemonstrating compliance to stakeholders and obtaining sign-off
   • CTesting individual components in isolation
   • DReviewing code for security vulnerabilities
   Reveal Solution Discussion Select an answer first