ISTQB ATM 問題集

質問 1：
You are performing a quality risk analysis for a CSCI (Computer Software Configuration
Item) used to implement a CBIT (Continuous Built-In Test) module of a safety-critical
system.
During the quality risk analysis you are trying to identify the ways in which failures of the
CBIT module can occur, for each of them trying to determine the potential causes and likely
effects, and the risk level (calculated as the product of three factors: severity, occurrence
and detection).
Which of the following risk analysis techniques are you working with?
K2 1 credit
A. Wide Band Delphi
B. Failure Mode and Effect Analysis
C. Cost of Exposure
D. A lightweight product risk analysis technique
正解：B

質問 2：
The following are the exit criteria described in the test plan of a software product:
EX1. The test suite for the product must ensure that at least each quality risk item is
covered by at least one test case (a quality risk item can be covered by more test cases).
EX2. All test cases in the test suite must be run during the execution phase.
EX3. Defects are classified into two categories: "C" (critical defect) and "NC" (non-critical
defect). No known C defects shall exist in the product at the end of the test execution
phase.
Which of the following information is useless when the specified exit criteria is evaluated?
K2 1 credit
A. A traceability matrix showing the relationships between the product risk items and the
test cases
B. A list of all the open defects with the associated classification information extracted from
the defect tracking system
C. The execution status of all the test cases extracted from the test management tool
D. A chart, showing the trend in the lag time from defect reporting to resolution, extracted
from the defect tracking system
正解：D

質問 3：
You are working on a project to develop an authentication system for an e-commerce
website. This system provides two features: Registration and authentication. Two different
development teams develop these two features.
There is a high likelihood that the delivery of the authentication feature to the test team will
be three weeks later. To complete the registration the user must provide the following
registration inputs: Name, surname, birth date, fiscal code and he/she can select a
username and a password.
A registered user can be a special user or a normal user. To be identified as a special user,
he/she must also provide, during the registration process, a voucher possibly received from
the IT department.
Access is granted only if a user is registered and the password is correct: In all other cases
access is denied. If the registered user is a special user and the password is wrong, a
special warning is shown on the system console.
You are currently performing a quality risk analysis using FMEA.
Based only on the given information, which of the following is NOT a product risk that could
be identified during the quality risk analysis?
K4 3 credits
A. The authentication system grants access to a normal user with a wrong password
B. The late delivery of the authentication feature to the test team causes delays in the start
of test execution and this could result in a shorter test period
C. The authentication system denies access for a special user with a wrong password, but
doesn't display a special warning on the system console
D. The authentication system grants access to a special user with a wrong password
正解：B

質問 4：
Which of the following statements describing how identified product quality risks should be
mitigated and managed, is true?
K2 1 credit
A. Risk mitigation of product quality risks can be effective only after starting test execution
B. The identification of new risks, the re-assessment of the level of existing risks and the
evaluation of the effectiveness of risk mitigation activities should only occur at the very
beginning of a project
C. The extent of re-testing and regression testing activities should be based on the risk
level
D. The priority of the development and execution of tests should not be based on the risk
level but only on the likelihood
正解：C

質問 5：
Which of the following would you expect to be most likely an example of a demotivating
factor for testers?
K2 1 credit
A. The management asks the testers to be kept informed about the intensity, quality and
results of testing
B. The testers are assessed on whether and how often they detect important and critical
failures
C. Test quality is measured by counting the number of customer/user reported problems.
D. The same regressions tests are manually executed by the same testers, for every
product release, without regression test tools
E. The testers' recommendations to improve the system or its testability are adopted by the
development team
正解：C,D

質問 6：
After the presentation, you are asked to explain the chart.
Assume you have applied a full risk-based testing strategy.

Which of the following answers would you expect to best describe the pie chart?
K4 3 credits
A. According to the full risk-based testing strategy applied, it is very likely that the highest-
risk items, tests and bugs remain in the blue and red areas. Therefore, it is very risky to
release the application
B. 97 percent of the risk items has been tested. No open bugs or test failures remain. Only
3 percent of risk items remains to be covered by the remaining test
C. All the risk items have been covered with tests. No more risk items remain to test
D. Only the lowest-risk items, tests and bugs should remain in the blue and red areas.
Therefore the application can be released at any time subject to management of the items
identified in those areas
正解：D