CT-STE: Certified Tester Security Test EngineerDemo

By ISTQB · Question Mode

QuestionQ38

Security Test Techniques

A tester carries out a test to verify that the API properly enforces authentication mechanisms, such as requiring valid tokens or credentials, before allowing access to protected endpoints.

What type of test is this?

  • A Security test on acceptance test level
  • B End-to-end security test
  • C Security test on component integration test level
  • D Security test on component test level
Explanation

A security test at the component integration test level verifies security properties across integrated APIs and flows, including authorization and authentication controls. Requiring a valid token or credential before an API grants access to a protected endpoint verifies that security enforcement at the API integration boundary.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!