practice sheet · all objectives switch to smart practice →
Certified Tester Security Tester (CT-SEC)
A newly certified CT-SEC tester is asked to justify to management why security testing should be planned and performed from several distinct perspectives rather than only checking documented requirements. Which set of perspectives is explicitly recognized as the basis for planning, performing, and evaluating security tests?
Explanation
Plan, perform and evaluate security tests from a variety of perspectives – policy-based, risk-based, standards-based, requirements-based and vulnerability-based.
A security tester receives an interim security test status report from a colleague. According to the CT-SEC business outcomes, which three qualities should the tester analyze the report against?
Explanation
Analyze a given interim security test status report to determine the level of accuracy, understandability, and stakeholder appropriateness.
Locked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to review