ISTQB Specialist (CT-STE v1.0.1) Probeprüfung #4

Full-length ISTQB Certified Tester Security Test Engineer (CT-STE v1.0.1) practice exam number 4: 40 questions, 43 points, 28 to pass (65%), 75 minutes. The chapter and K-level mix follows the official ISTQB Exam Structure Table exactly — 6/7/5/4/4/4/4/3/3 across the nine chapters, with 24 K2, 13 K3 and 3 K4 items; K4 questions carry 2 points each. This fourth mock leans on the open-source and third-party supply chain: composition analysis and reachability-based prioritisation, the CWE to CVE to CAPEC chain, security audits and the evidence testing supplies to them, and the difference between hiding a vulnerability behind a firewall rule and removing it. The two K4 attack-scenario items cover a staged campaign that begins with vishing and tailgating, and an eleven-week exfiltration pattern over DNS. Applied questions also cover zero trust inside a build pipeline, reconciliation and recertification of identities, infrastructure-as-code review, test levels for a dispense-once rule, continuous delivery under a regulator that still demands a signed report per release, and tool selection when the source code is unavailable. Scenarios come from a port terminal, an online pharmacy, a payroll bureau, a hotel booking group, a smart-building platform, a freight rail operator, a drone delivery operator and a museum ticketing platform. Every answer option, correct and incorrect, carries a written rationale.