ISTQB Specialist (CT-STE v1.0.1) Mock Exam #4
Full-length ISTQB Certified Tester Security Test Engineer (CT-STE v1.0.1) practice exam number 4: 40 questions, 43 points, 28 to pass (65%), 75 minutes. The chapter and K-level mix follows the official ISTQB Exam Structure Table exactly — 6/7/5/4/4/4/4/3/3 across the nine chapters, with 24 K2, 13 K3 and 3 K4 items; K4 questions carry 2 points each. This fourth mock leans on the open-source and third-party supply chain: composition analysis and reachability-based prioritisation, the CWE to CVE to CAPEC chain, security audits and the evidence testing supplies to them, and the difference between hiding a vulnerability behind a firewall rule and removing it. The two K4 attack-scenario items cover a staged campaign that begins with vishing and tailgating, and an eleven-week exfiltration pattern over DNS. Applied questions also cover zero trust inside a build pipeline, reconciliation and recertification of identities, infrastructure-as-code review, test levels for a dispense-once rule, continuous delivery under a regulator that still demands a signed report per release, and tool selection when the source code is unavailable. Scenarios come from a port terminal, an online pharmacy, a payroll bureau, a hotel booking group, a smart-building platform, a freight rail operator, a drone delivery operator and a museum ticketing platform. Every answer option, correct and incorrect, carries a written rationale.
Exam format
The ISTQB CT-STE v1.0.1 exam has 40 questions, 75 minutes, and 28 of 43 points (65%) to pass.
ExamCaliber has 162 free ISTQB CT-STE v1.0.1 practice questions in 4 full-length mock exams of 40 questions, 75 minutes and 65% to pass — every answer, right and wrong, carries a written rationale. No sign-up, no paywall.
What this mock covers
This paper draws 40 questions from 9 chapters of the ISTQB CT-STE v1.0.1 syllabus. The split below is read from the questions bound to this mock, so it is the paper you will actually sit rather than a target.
| Chapter | Questions | Share | Points |
|---|---|---|---|
| Chapter 1 · Security Paradigms | 6 | 15% | 6 |
| Chapter 2 · Security Test Techniques | 7 | 18% | 7 |
| Chapter 3 · The Security Test Process | 5 | 13% | 5 |
| Chapter 4 · Security Testing Standards and Best Practices | 4 | 10% | 4 |
| Chapter 5 · Adjusting Security Testing to the Organizational Context | 4 | 10% | 6 |
| Chapter 6 · Adjusting Security Testing to Software Development Lifecycle Models | 4 | 10% | 5 |
| Chapter 7 · Security Testing as Part of an Information Security Management System | 4 | 10% | 4 |
| Chapter 8 · Reporting Security Test Results | 3 | 8% | 3 |
| Chapter 9 · Security Testing Tools | 3 | 8% | 3 |
Scoring is weighted: 40 questions are worth 43 points, because a question at a higher cognitive level counts for more. Revise the heavier chapters first.
Cognitive levels in this mock
Each of the 40 questions is mapped to a syllabus cognitive level - K1 recall, K2 comprehension, K3 application, K4 analysis. A paper heavy on K3 asks you to apply a technique, not to name it.
- K2 - Understand24 (60%)
- K3 - Apply13 (33%)
- K4 - Analyse3 (8%)
Practise one chapter at a time
If this mock exposes a weak chapter, drill that chapter on its own before sitting another full paper.
- 1. Security Paradigms
- 2. Security Test Techniques
- 3. The Security Test Process
- 4. Security Testing Standards and Best Practices
- 5. Adjusting Security Testing to the Organizational Context
- 6. Adjusting Security Testing to Software Development Lifecycle Models
- 7. Security Testing as Part of an Information Security Management System
- 8. Reporting Security Test Results
- 9. Security Testing Tools
Other mock exams for this certification
3 more mock exams are available for ISTQB CT-STE v1.0.1, each a different selection from the same question bank.