CT-SEC

Review 45 CT-SEC practice questions with answer explanations and community insights.

Question 1

Scenario:You are a member of a test team that is responsible for performing system testing and supporting user acceptance testing. The application being tested has reached the exit criteria in both test levels. The application has been deployed in the pre-production environment, where it has been observed that the database administrator is unable to access the database objects.Question:In the above scenario, which ONE of the following attributes of the test environment is missing?

  1. Isolated
  2. Complete
  3. Restorable
  4. Testable

Question 2

Sophie is analyzing the security requirements of user stories to ensure that the security-related aspects of the users' needs have been adequately covered. She is also defining the most workable approach to develop the application in a secure way.In which stage of the software development life cycle should this activity be performed?

  1. Requirement
  2. Design
  3. Implementation
  4. System Testing

Question 3

Which ONE of the following security vulnerabilities can be identified through structural testing during component testing?

  1. Vulnerabilities due to interactions between components, with other systems and with organizational elements.
  2. Malicious code inserted by an internal employee or contractor.
  3. Vulnerabilities due to non-compliance with specified security requirements.
  4. Security vulnerabilities that are detected by introducing massive amounts of synthetic data, according to a specific systematic pattern, into the component or system being tested.

Question 4

Scenario:At “Happy Wrench Plumbing”, an administrator (admin) manages clients and other users and is able to edit their personal details in the application by accessing the URL: http://www.abcxyz.com/editusers.It is necessary to test if non-admin users can perform this above-mentioned functionality.Question:Which ONE of the following options CORRECTLY corresponds to the security testing type that is necessary to achieve this goal?

  1. Authentication
  2. Authorization
  3. Access validation
  4. User experience

Question 5

Annie is creating a fake email id to present herself as the CTO of a company. She is also using social media, instant messaging, and SMS to trick some potential victims into providing sensitive information.Which ONE of the following attacks is she planning?

  1. Tailgating
  2. Eavesdropping
  3. Social engineering attack
  4. Fake cryptography
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.