The Security Test Environment CT-STE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   After completing a security test campaign, a test team is decommissioning the test environment. What is the most important step to take during the cleanup process?

   • ADelete all test data and virtual machines, and document the cleanup for audit purposes.
   • BDisconnect the environment from the network but leave it powered on.
   • CKeep the environment running for future tests, but remove all monitoring.
   • DArchive the environment as-is, including all test data, for potential future reference.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security test team is using a test environment that was set up several months ago. Since then, the production environment has been updated with new security patches and configuration changes. The team is about to start a new test cycle. What should they do first?

   • AUpdate the test environment to match the current production configuration, and document the changes.
   • BUse the old environment, but note in the report that it does not reflect the current production.
   • CRebuild the test environment from scratch to ensure it is clean.
   • DStart the test cycle immediately, as the environment is already set up.
   Reveal Solution Discussion Select an answer first
4. 33application · easy

   A company is planning to conduct a security test of its new customer relationship management (CRM) system. The test team proposes to use a separate environment that mirrors the production setup. What is the primary purpose of using a separate security test environment?

   • ATo ensure that the test team has full access to production systems.
   • BTo provide a place to store test results and reports.
   • CTo reduce the cost of testing by using cheaper hardware.
   • DTo allow testing without risking disruption to production operations or data.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What should be documented regarding access controls in the security test environment?

   • AThe personal passwords of all testers
   • BWhich individuals or roles have access to the environment and what permissions they have
   • CThe names of all testers' family members
   • DThe IP addresses of all production servers
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A security test team is testing an application that handles personal data. They need to use realistic data to test for data leakage vulnerabilities, but they must comply with data protection regulations. What is the most effective way to create a realistic dataset while ensuring privacy?

   • AUse data masking techniques to anonymize production data, ensuring that personal identifiers are replaced with realistic but fake values.
   • BUse a small sample of real production data, but obtain consent from the individuals.
   • CUse production data, but ensure the test environment is isolated and encrypted.
   • DGenerate synthetic data from scratch, without using any production data as a basis.
   Reveal Solution Discussion Select an answer first