Security Testing CTAL-TTA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's web application uses a REST API to allow third-party integrations. The API uses API keys for authentication. The security test team is designing test cases for the API authentication mechanism. Which of the following test cases would MOST effectively verify the security of the API key authentication?

   • AAttempting to access the API with a revoked API key
   • BVerifying that the API returns the correct response format
   • CChecking that the API documentation is up to date
   • DConfirming that the API can handle a high volume of requests
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which security principle ensures that data has not been altered or tampered with during transmission or storage?

   • ANon-repudiation
   • BConfidentiality
   • CIntegrity
   • DAvailability
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a compliance-related reason for conducting security testing?

   • ATo satisfy regulatory requirements
   • BTo improve system performance
   • CTo reduce development time
   • DTo enhance user experience
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is developing a new mobile app that stores user credentials locally on the device. The app is subject to the California Consumer Privacy Act (CCPA), which requires that personal information be protected. The security team is planning security testing. Which of the following is the MOST important test to include?

   • ATesting whether the credentials are stored in an encrypted format on the device
   • BTesting whether the app's user interface is intuitive for users
   • CTesting whether the app's performance is acceptable on older devices
   • DTesting whether the app's design complies with the company's branding guidelines
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A large enterprise is planning security testing for its internal employee portal. The portal uses single sign-on (SSO) and is accessed by employees from various departments. The security team has limited resources and must decide which security testing activities to prioritize. Which of the following should be the HIGHEST priority?

   • ATesting the portal's search functionality for performance issues
   • BTesting the portal's backup and recovery procedures
   • CTesting the SSO implementation to ensure that users cannot escalate their privileges
   • DTesting the portal's user interface for accessibility compliance
   Reveal Solution Discussion Select an answer first