CT-STE: Certified Tester Security Test EngineerDemo

By ISTQB · Question Mode

QuestionQ9

Security Test Techniques

You test a system that sends documents containing sensitive data between users. One risk is that an attacker who obtains access to such a document could read its contents. What type of testing verifies a mechanism that prevents unauthorized persons from reading documents?

  • A Conformance testing of digital signatures
  • B Conformance testing of public key encryption
  • C Code reviews aiming to detect SQL injection
  • D Brute force testing using rainbow tables
Explanation

Public-key encryption protects confidentiality: a document can be encrypted with a recipient’s public key and decrypted only with the corresponding private key. Conformance testing of that encryption mechanism verifies the protection against unauthorized reading. NIST describes a public key as usable to send a confidential message to the holder of its corresponding private key.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!