Testing Protective Technologies CT-STE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When reporting test results to stakeholders, what is a key consideration?

   • AAvoiding mention of unresolved issues
   • BIncluding every raw log entry for completeness
   • CUsing only technical jargon to demonstrate expertise
   • DTailoring the report to the audience's technical level and needs
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a firewall rule that allows outbound HTTP/HTTPS traffic from the internal network. During testing, the tester discovers that the firewall also allows outbound traffic on port 22 (SSH). The company policy only permits SSH for system administrators. What should the tester do?

   • AChange the SSH rule to allow only port 22 from any source
   • BIgnore the rule because outbound SSH is not a security risk
   • CReport the SSH outbound rule as a finding and recommend restricting it to admin source IPs
   • DDelete the SSH outbound rule immediately
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is migrating to a new cloud provider and needs to ensure data is encrypted in transit and at rest. The security tester is asked to verify the encryption implementation. The tester finds that the cloud provider uses TLS 1.2 for data in transit and AES-256 for data at rest. However, the encryption keys are stored in the same cloud account as the data. What is the most appropriate recommendation?

   • ARecommend disabling encryption because the cloud provider is trusted
   • BRecommend using TLS 1.3 to improve security
   • CAccept the current configuration because TLS 1.2 and AES-256 are strong
   • DRecommend using a separate key management service with strict access controls
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When testing antivirus software, which of the following is a key aspect to evaluate?

   • AThe size of the installation file
   • BThe number of features in the product
   • CThe ability to detect known malware samples
   • DThe color of the user interface
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security tester is evaluating the antivirus solution on a corporate network. The tester uses a known, non-malicious EICAR test file and a custom-encrypted variant of the same file. The antivirus detects the plain EICAR file but not the encrypted variant. What does this indicate about the antivirus?

   • AThe antivirus relies on signature-based detection and may miss polymorphic or encrypted malware
   • BThe antivirus is working correctly because the encrypted variant is not a real threat
   • CThe antivirus is generating a false negative and should be replaced immediately
   • DThe antivirus is generating a false positive for the plain EICAR file
   Reveal Solution Discussion Select an answer first