Certified Tester Security Test Engineer (CT-STE) v1.0.1 試験対策問題集

模擬試験モードの設定

上記は本サイトの模擬試験モードの設定値です。実際の試験の出題数・制限時間・合格基準は、各認定プログラムの公式サイトでご確認ください。

出題分野

• Security Paradigms（出題比率 15%）
• Security Test Techniques（出題比率 15%）
• The Security Test Process（出題比率 10%）
• Security Testing Standards and Best Practices（出題比率 10%）
• Adjusting Security Testing to the Organizational Context（出題比率 10%）
• Adjusting Security Testing to SDLC Models（出題比率 10%）
• Security Testing as Part of an ISMS（出題比率 10%）
• Reporting Security Test Results（出題比率 10%）
• Security Testing Tools（出題比率 10%）

フリー問題

1. A team has pulled a widely used open-source library into a public service. A col…
2. A retailer is replacing a design in which anything already inside the corporate …
3. A city authority publishes a live road traffic feed that every resident may read…
4. A risk register for a multi-tenant service records that each platform brings its…
5. Before a run against a booking service the engineer is handed part of the networ…
6. A media company runs a detection system that raises an alert whenever incoming t…
7. On a payments program somebody has to decide how deep the security testing will …
8. A developer hands the engineer the detailed design of one cryptographic helper t…
9. An engineer starting on an unfamiliar web service wants an overview of the attac…
10. A start-up has adopted a proprietary security guide that appeared six months ago…
11. An operator of critical infrastructure is told that a regulation names no specif…
12. A manufacturer is arranged by common functions such as production, marketing, hu…
13. A team delivers one small feature per pipeline run, aims to have test results wi…
14. A program director wants security verification only in the phase just before rel…
15. A manager states that publishing the security test report will itself raise the …
16. The check step of an improvement cycle has so far covered only a dynamic black-b…
17. A test shows that an empty input parameter lets the caller take over an applicat…
18. A vulnerability in a purchased component cannot be patched before the next relea…
19. A team wants a tool it can adapt to its own unusual protocol, and it accepts tha…
20. A tool reads uncompiled source, the libraries it references and the configuratio…