Which of the following is a step in setting up a security test environment?

Installing the necessary software and configuring the environment to match production

Deleting all test data after each test run

Which of the following is NOT a typical component of a security test environment?

Test data sets that mimic production data

The organization's marketing materials

Operating systems and applications under test

A company is setting up a security test environment for a web application that uses a load balancer and multiple application servers. The test team wants to ensure the environment is representative of production. What should they do?

Use a different load balancer model to test for compatibility issues.

Skip the load balancer and connect directly to the application servers.

Configure the test environment with the same load balancer and the same number of application servers as production.

Use a single application server to simplify the environment.

A security test team is planning to conduct a network penetration test. They need to monitor the test environment to detect any unexpected behavior. Which tool is most appropriate for this purpose?

An intrusion detection system (IDS) configured to monitor the test network.

Certified Tester Security Test Engineer

Domain 3Objective 2

The Security Test Environment CT-STE Practice Questions (Page 4)

Part of the The Security Test Process domain, which makes up ~12% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~4–6 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

8concepts

Questions 16–20

16foundation · easy
Which of the following is a step in setting up a security test environment?
Select an answer first
17foundation · easy
Which of the following is NOT a typical component of a security test environment?
Select an answer first
18foundation · easy
Which of the following is an example of a tool used to support security testing?
Select an answer first
19application · medium
A company is setting up a security test environment for a web application that uses a load balancer and multiple application servers. The test team wants to ensure the environment is representative of production. What should they do?
Select an answer first
20application · medium
A security test team is planning to conduct a network penetration test. They need to monitor the test environment to detect any unexpected behavior. Which tool is most appropriate for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.