CT-STE: Certified Tester Security Test EngineerDemo

Question

Which of the following is an example of firewall testing?

A Ensuring that when queried, the system returns data masked or replaced with random characters, verifying that sensitive data is protected from unauthorized users
B Using a tool to scan the network and identify open ports, ensuring that only the necessary ports are open and that all other ports are properly blocked
C Verifying that the access of the system to the right roles is restricted, services are open only when needed, and application updates are properly monitored
D Using “brute force” or “dictionary” attacks to attempt to get plain data from obfuscated data, and performing reverse-engineering of byte code

Explanation

Firewall testing verifies that network access rules allow only the required ports and services while blocking all other unauthorized inbound or outbound connections. A network port scan can confirm that only necessary ports are open and the remaining ports are blocked.

CT-STE: Certified Tester Security Test EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ2

Community Discussion