CT-STE: Certified Tester Security Test Engineer

By ISTQB · Question Mode

QuestionQ13

Security Test Techniques

You have been asked to conduct end-to-end testing of online payment processing, with a focus on security testing to validate secure transmission of payment details (for example, enforcing HTTPS), appropriate encryption of sensitive data (for example, credit card numbers), and compliance with standards such as PCI DSS.

Which of the following end-to-end security tests validates one of the requirements mentioned above?

Explanation

PCI DSS requires cardholder data sent over open or public networks to be protected by strong cryptography and secure protocols. Verifying that all payment data is transmitted over HTTPS using strong encryption directly tests that requirement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!