What is a polymorphic virus?

A virus that changes its code signature each time it infects a new system

A virus that only affects systems with multiple processors

A virus that is detected by multiple antivirus engines

A virus that spreads through multiple attack vectors simultaneously

When testing a firewall configuration, what is the primary objective?

To ensure the firewall blocks all incoming traffic

To identify all open ports on the firewall

To measure the firewall's throughput performance

To verify that rules block unauthorized traffic while allowing legitimate traffic

What is the difference between authentication and authorization?

Authentication is a one-time process, while authorization is continuous

Authentication verifies identity, while authorization determines what an authenticated user can do

Authentication is used for users, while authorization is used for systems

Authentication controls access to data, while authorization verifies identity

Why is patch management important for protective technologies?

To make the software easier to use

To reduce the cost of the software

To increase the number of features in the product

To fix known vulnerabilities that could be exploited by attackers

What is the primary purpose of security logging?

To automatically block malicious traffic

To replace the need for intrusion detection systems

To record events that can be used to detect and investigate security incidents

Certified Tester Security Test Engineer

Domain 2Objective 7

Testing Protective Technologies CT-STE Practice Questions (Page 6)

Part of the Security Test Techniques domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

10concepts

Questions 26–30

26foundation · easy
What is a polymorphic virus?
Select an answer first
27foundation · easy
When testing a firewall configuration, what is the primary objective?
Select an answer first
28foundation · easy
What is the difference between authentication and authorization?
Select an answer first
29foundation · easy
Why is patch management important for protective technologies?
Select an answer first
30foundation · easy
What is the primary purpose of security logging?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.