A security test engineer is planning system-level security tests for a new cloud-based collaboration platform. The platform integrates with an identity provider and a document storage service. The engineer needs to define the scope, environment, and test data for the tests. Which of the following is the most important consideration when planning these system-level security tests?

Using synthetic test data that does not resemble real user data.

Testing only the new features added in the latest release.

Performing tests in a development environment to avoid disrupting production.

Using a production-like environment that includes all integrated components and realistic test data.

What is the purpose of evaluating acceptance security test results?

To identify as many security defects as possible

To verify that individual components work correctly

To measure the system's performance under load

To determine if the system is ready for deployment and meets acceptance criteria

Which activity is characteristic of acceptance testing in a security context?

Demonstrating to stakeholders that security requirements are fulfilled

Reviewing code for common vulnerabilities

Executing penetration tests against the production environment

Measuring the system's resilience to denial-of-service attacks

What is a key security-specific objective of acceptance testing?

To verify that each security component works in isolation

To confirm that security requirements are met and acceptable to stakeholders

To identify as many security vulnerabilities as possible

To measure the system's performance under peak load

What is the primary purpose of acceptance testing in a security context?

To measure the performance of the system under load

To verify that individual security components work correctly

To find as many security defects as possible in the integrated system

To validate that security requirements are met and acceptable to stakeholders

Certified Tester Security Test Engineer

Domain 3Objective 5

System Testing and Acceptance Testing CT-STE Practice Questions (Page 6)

Part of the The Security Test Process domain, which makes up ~12% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~4–6 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

10 Concepts in This Objective

System Testing in Security Context
Acceptance Testing in Security Context
Security Test Objectives in System Testing
Security Test Objectives in Acceptance Testing
Planning System Security Tests
Planning Acceptance Security Tests
Executing System Security Tests
Executing Acceptance Security Tests
Evaluating System Test Results
Evaluating Acceptance Test Results

Questions 26–30

26application · medium
A security test engineer is planning system-level security tests for a new cloud-based collaboration platform. The platform integrates with an identity provider and a document storage service. The engineer needs to define the scope, environment, and test data for the tests. Which of the following is the most important consideration when planning these system-level security tests?
Select an answer first
27foundation · easy
What is the purpose of evaluating acceptance security test results?
Select an answer first
28foundation · easy
Which activity is characteristic of acceptance testing in a security context?
Select an answer first
29foundation · easy
What is a key security-specific objective of acceptance testing?
Select an answer first
30foundation · easy
What is the primary purpose of acceptance testing in a security context?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.