What is the purpose of testing access control mechanisms?

To ensure all users have the same level of access

To verify that passwords are stored in plaintext

To verify that users can only access resources they are permitted to

To test the speed of authentication processes

What is the key difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?

An IDS is used for network traffic, while an IPS is used for host-based monitoring

An IDS is passive and alerts, while an IPS actively blocks or drops traffic

An IDS is deployed at the perimeter, while an IPS is deployed inside the network

An IDS uses signature-based detection, while an IPS uses anomaly-based detection

What is the primary role of protective technologies in an organization's security architecture?

To provide a legal framework for prosecuting attackers

To mitigate security risks by reducing the likelihood or impact of attacks

To detect and respond to attacks after they have occurred

To eliminate all security risks by preventing any potential attack

What is a common security issue with default configurations?

Default configurations are incompatible with other software

Default configurations are always slow

Default passwords are often well-known and easily exploited

Default configurations are too complex to manage

A security tester is reviewing the patch management process for a firewall appliance. The vendor released a critical security patch three months ago, but the firewall is still running the previous version. What is the tester's primary concern?

The firewall may be vulnerable to known exploits that the patch addresses

The firewall may not support the latest encryption algorithms

The firewall's logs may not be generated correctly

The firewall's performance may be degraded

Certified Tester Security Test Engineer

Domain 2Objective 7

Testing Protective Technologies CT-STE Practice Questions (Page 5)

Part of the Security Test Techniques domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

10concepts

Questions 21–25

21foundation · easy
What is the purpose of testing access control mechanisms?
Select an answer first
22foundation · easy
What is the key difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?
Select an answer first
23foundation · easy
What is the primary role of protective technologies in an organization's security architecture?
Select an answer first
24foundation · easy
What is a common security issue with default configurations?
Select an answer first
25application · medium
A security tester is reviewing the patch management process for a firewall appliance. The vendor released a critical security patch three months ago, but the firewall is still running the previous version. What is the tester's primary concern?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.