The Security Test Environment CT-STE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is a key consideration when configuring the security test environment?

   • AConfiguring the environment with minimal resources to save money
   • BUsing a different operating system than production to avoid licensing costs
   • CEnsuring the environment is configured with the same security controls as production
   • DDisabling all security controls to make testing easier
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A financial services company is preparing to run a penetration test against a replica of its online banking application. The test will include attempts to exploit SQL injection and cross-site scripting vulnerabilities. The security team has set up a separate network segment with a copy of the application and a subset of production-like data. Which additional measure is most important to ensure the test does not impact real customers or leak sensitive data?

   • AConfigure the test segment with strict egress filtering so that no traffic can leave the test network to the internet or production.
   • BGrant the test team administrative access to the production environment for comparison purposes.
   • CDisable all logging and monitoring in the test environment to avoid generating false alerts.
   • DUse the same DNS servers and domain names as production to ensure the test environment behaves identically.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Why is it important to isolate the security test environment from production?

   • ATo prevent security testing activities from causing unintended damage or data leakage to production systems
   • BTo ensure that testers have the same performance as production users
   • CTo reduce the cost of the test environment by sharing resources with production
   • DTo allow testers to use real production credentials for authentication testing
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A healthcare organization is setting up a security test environment to evaluate the security of a new patient portal. The portal uses a specific version of a web server and a database that stores personal health information. The test team wants to ensure that the environment is realistic enough to produce valid results. What is the most important consideration when configuring the test environment?

   • AUse a copy of production data to ensure the most realistic testing.
   • BUse the latest versions of all software to ensure the test environment is secure.
   • CUse the same versions of the web server, database, and operating system as production, but with synthetic data.
   • DUse a minimal configuration with only the core components to reduce the attack surface.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A security test team is planning to test a web application that uses a microservices architecture. The team needs to select tools that can effectively test the interactions between services. Which tool selection is most appropriate?

   • AA penetration testing framework that focuses on the user interface.
   • BAn API testing tool that can simulate requests between services, along with a service mesh to monitor traffic.
   • CA traditional vulnerability scanner that scans each service individually.
   • DA network sniffer to capture all traffic between services.
   Reveal Solution Discussion Select an answer first