CT-SEC: Certified Tester Security Tester

By ISTQB · Question Mode

QuestionQ9

Security Testing Tools

George is a security tester using a suite of tools for different tasks, including network inventory, managing service-upgrade schedules, and monitoring host or service uptime. He wants to identify the hosts available on the network, the services and OS versions they run, the types of packet filters and/or firewalls in use, and create a list of string parameters such as ‘ or “, -- or #, /…/, +, ||, %, PRINT.

Which TWO of the following types of testing is George performing?

Choose two
Explanation

Network discovery and security auditing enumerate reachable hosts, exposed services, operating-system versions, and filtering controls. Characters and tokens such as quotes, SQL comments, concatenation operators, percent signs, and PRINT are commonly used to probe for and exploit SQL injection flaws.

Community Discussion

No comments yet. Be the first to start the discussion!