CT-STE: Certified Tester Security Test Engineer

By ISTQB · Question Mode

QuestionQ9

Security Test Techniques

You test a system that sends documents containing sensitive data between users. One risk is that an attacker who obtains access to such a document could read its contents. What type of testing verifies a mechanism that prevents unauthorized persons from reading documents?

Explanation

Public-key encryption protects confidentiality: a document can be encrypted with a recipient’s public key and decrypted only with the corresponding private key. Conformance testing of that encryption mechanism verifies the protection against unauthorized reading. NIST describes a public key as usable to send a confidential message to the holder of its corresponding private key.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!