What is the primary goal of taint analysis in source code analysis?

To optimize the performance of the application.

To track the flow of untrusted data from sources to sinks.

To identify unreachable code and infinite loops.

To measure the code coverage of test cases.

How do SAST tools identify security vulnerabilities in source code?

By sending crafted HTTP requests to the running application and analyzing responses.

By analyzing the source code statically without executing the application.

By monitoring the application's memory usage during runtime.

By executing the application with malicious inputs and observing its behavior.

Which of the following is a limitation of SAST tools?

They cannot identify vulnerabilities that require runtime context.

They are unable to produce any reports.

They can only analyze code written in Java.

They require a running application to perform analysis.

What is a false positive in the context of white-box security test tools?

A test case that passes when it should fail.

A vulnerability that exists in the code but is not reported by the tool.

A vulnerability that is correctly identified by the tool.

A reported issue that is not actually a vulnerability.

A SAST tool is configured to analyze a C++ application. The tool reports a buffer overflow vulnerability in a function that copies data from one array to another. Which source code analysis technique is most likely responsible for this finding?

Lexical analysis, which scans the source code for dangerous function names like `memcpy`.

Taint analysis, which marks the source array as untrusted and traces it to the copy operation.

Control flow analysis, which examines the order of statement execution to find paths where bounds checks are missing.

Data flow analysis, which tracks the size of the source array and the destination array to determine if the copy operation can exceed the destination's capacity.

Certified Tester Security Test Engineer

Domain 9Objective 1

White-Box Security Test Tools CT-STE Practice Questions (Page 4)

Part of the Security Test Tools domain, which makes up ~15% of our current practice bank. ISTQB does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

Questions 16–20

16foundation · easy
What is the primary goal of taint analysis in source code analysis?
Select an answer first
17foundation · easy
How do SAST tools identify security vulnerabilities in source code?
Select an answer first
18foundation · easy
Which of the following is a limitation of SAST tools?
Select an answer first
19foundation · easy
What is a false positive in the context of white-box security test tools?
Select an answer first
20application · medium
A SAST tool is configured to analyze a C++ application. The tool reports a buffer overflow vulnerability in a function that copies data from one array to another. Which source code analysis technique is most likely responsible for this finding?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-STE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-STE” is a trademark of its owner, used for identification only.