What is the key characteristic of dynamic analysis techniques?

They analyze the application's documentation

They rely solely on developer interviews

They require the application to be running

They only inspect the application's source code

A security team is evaluating a new web application for runtime vulnerabilities. They want to detect issues that only manifest when the application is executing, such as memory leaks and race conditions. Which type of tool should they use?

A static analysis tool like Checkmarx

A dynamic analysis tool like a debugger or profiler

A network vulnerability scanner like Nexpose

A web application scanner like Netsparker

Why might a dynamic test tool provide incomplete coverage of an application?

It only tests the code paths that are executed during the test run

It always tests every possible input combination

It only works on compiled languages

What is the primary purpose of a network vulnerability scanner?

To intercept and modify network packets

To generate malformed inputs for application testing

To identify weaknesses in network services and configurations

To simulate a full exploitation of a web application

What is the main function of a web application scanner?

To manage user authentication sessions

To encrypt network traffic between clients and servers

To automate the detection of common web vulnerabilities

To block malicious IP addresses at the firewall

Certified Tester Security Test Engineer

Domain 9Objective 8

Understand the Usage and Concepts of Dynamic Test Tools CT-STE Practice Questions (Page 3)

Part of the Security Test Tools domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

Questions 11–15

11foundation · easy
What is the key characteristic of dynamic analysis techniques?
Select an answer first
12application · medium
A security team is evaluating a new web application for runtime vulnerabilities. They want to detect issues that only manifest when the application is executing, such as memory leaks and race conditions. Which type of tool should they use?
Select an answer first
13foundation · easy
Why might a dynamic test tool provide incomplete coverage of an application?
Select an answer first
14foundation · easy
What is the primary purpose of a network vulnerability scanner?
Select an answer first
15foundation · easy
What is the main function of a web application scanner?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.