Practice · Certified Tester Security Test Engineer (CT-STE)

~/istqb-ct-ste · istqb-ct-ste_d1_3fdb5f34e53c ▊

← Certified Tester Security Test Engineer (CT-STE) · practice sheet

istqb-ct-ste_d1_3fdb5f34e53c domain/d1 · medium single

During an engagement, an auditor discovers that certain security policies and procedures cannot be exercised through dynamic execution. How do security audits and security testing complement each other in this situation?

A Security audits guarantee all vulnerabilities are found, so no further testing is required
B Security testing replaces the audit because it examines policies directly
C Auditing identifies deficiencies and areas to test, while security testing proves whether controls are in place and working effectively
D Audits are dynamic testing and security testing is static, so they cannot be combined

Unlock this exam to join the per-question discussion and vote on questions.

next question →