ISTQB Specialist (CT-STE v1.0.1) Examen de práctica #3

Full-length CT-STE practice exam number 3: 40 questions, 43 points, 65% to pass, 75 minutes. The chapter and K-level mix follows the official ISTQB Security Test Engineer v1.0.1 exam structure exactly — 6/7/5/4/4/4/4/3/3 questions across the nine chapters, with 24 K2, 13 K3 and 3 K4 items. This mock leans on attack scenario analysis: NIDS evidence of active reconnaissance, a denial-of-service pattern with no ransom demand, and the gap between two-week iterations and a quarterly regulatory release window. Applied questions cover reconciliation testing of accumulated permissions, CAPEC-driven test design, STRIDE information disclosure and denial of service, standards as imperfect test oracles, data localisation and outsourced testing, security regression after a library upgrade, ISMS maturity, technical impact analysis, hiding versus removing a vulnerability, and tool selection without source code. Every answer option carries a rationale.