ISTQB® ATM Exam Practice Questions (P. 4)

Assume you are managing the system testing phase of a project.
The system test execution period is scheduled to twenty weeks.
All tests are manual tests. You are following a risk-driven test approach.
During the last staff meeting the project manager tells you new deadlines that will not allow completion of all the system tests.
Which of the following would you expect to be the best way to respond to this situation?

You are performing a quality risk analysis for a CSCI (Computer Software Configuration Item) used to implement a CBIT (Continuous Built-In Test) module of a safety-critical system.
During the quality risk analysis you are trying to identify the ways in which failures of the CBIT module can occur, for each of them trying to determine the potential causes and likely effects, and the risk level (calculated as the product of three factors: severity, occurrence and detection).
Which of the following risk analysis techniques are you working with?

You are working on a project to develop an authentication system for an e-commerce website. This system provides two features: Registration and authentication.
Two different development teams develop these two features.
There is a high likelihood that the delivery of the authentication feature to the test team will be three weeks later. To complete the registration the user must provide the following registration inputs: Name, surname, birth date, fiscal code and he/she can select a username and a password.
A registered user can be a special user or a normal user. To be identified as a special user, he/she must also provide, during the registration process, a voucher possibly received from the IT department.
Access is granted only if a user is registered and the password is correct: In all other cases access is denied. If the registered user is a special user and the password is wrong, a special warning is shown on the system console.
You are currently performing a quality risk analysis using FMEA.
Based only on the given information, which of the following is NOT a product risk that could be identified during the quality risk analysis?

Which of the following statements describing how identified product quality risks should be mitigated and managed, is true?

Which of the following statements about management of product quality risks in mature organizations with respect to the lifecycle, is true?