Practice · Certified Tester Security Test Engineer (CT-STE)

~/istqb-ct-ste · istqb-ct-ste_d1_0dd8e217bc46 ▊

← Certified Tester Security Test Engineer (CT-STE) · practice sheet

istqb-ct-ste_d1_0dd8e217bc46 domain/d1 · medium single

A security team is classifying an internal traffic-information display system where the timely availability of data to a large audience matters most, while confidentiality of the data is not a concern. According to the asset classification guidance, which security level and CIA pillar most likely apply, and what does this imply for security testing?

A High security level, confidentiality pillar; security testing is a must
B Low security level, availability pillar; security testing might not be necessary
C Medium security level, integrity pillar; security testing will be necessary
D Low security level, integrity pillar; security testing is a must

Unlock this exam to join the per-question discussion and vote on questions.

next question →