A team is automating security tests for a web application. They want to integrate these tests into the CI pipeline but are concerned about the tests being time-consuming and requiring specialized knowledge. Which approach is most effective?

Run full penetration tests on every commit

Run a subset of fast security scans (e.g., static analysis) in CI and schedule deeper security tests (e.g., penetration testing) separately

Skip security testing in CI and rely on manual security reviews

Use only dynamic analysis tools in CI

A team wants to measure the effectiveness of their test automation efforts. They have been tracking the number of automated tests but want a more meaningful metric. Which metric is most useful for assessing the value of test automation?

Time spent writing automated tests

Total number of automated tests

Number of test automation tools used

Percentage of defects found by automated tests

Which practice helps maintain automated tests and reduce flakiness?

Running tests only once a month

Avoiding the use of version control for test code

Regularly reviewing and updating tests to match application changes

Increasing the number of assertions in each test

An Agile team is developing a microservices-based application. They want to ensure fast feedback on code changes while keeping the test suite maintainable. The team has decided to follow the test automation pyramid. Which approach best aligns with this strategy?

Automate only integration tests between microservices

Focus primarily on end-to-end UI tests to cover the entire system

Prioritize a large number of unit tests, a moderate number of integration tests, and a small number of end-to-end UI tests

Write an equal number of tests at each layer

Certified Tester Advanced Level Agile Technical Tester

Domain 3Objective 1

Test Automation Techniques CT-ATT Practice Questions (Page 2)

Part of the Test Automation domain, which makes up ~19% of our current practice bank. ISTQB does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

Questions 6–10

6expert · hard
A team is automating security tests for a web application. They want to integrate these tests into the CI pipeline but are concerned about the tests being time-consuming and requiring specialized knowledge. Which approach is most effective?
Select an answer first
7application · medium
A team wants to measure the effectiveness of their test automation efforts. They have been tracking the number of automated tests but want a more meaningful metric. Which metric is most useful for assessing the value of test automation?
Select an answer first
8foundation · easy
Which practice helps maintain automated tests and reduce flakiness?
Select an answer first
9application · medium
A team is building a new web application with a React front end and a Java backend. They want to automate tests at all layers of the test automation pyramid. The team has limited programming experience and needs to involve business analysts in test creation. Which test automation framework approach is most suitable for the UI layer?
Select an answer first
10application · medium
An Agile team is developing a microservices-based application. They want to ensure fast feedback on code changes while keeping the test suite maintainable. The team has decided to follow the test automation pyramid. Which approach best aligns with this strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-ATT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-ATT” is a trademark of its owner, used for identification only.