Principles of Risk-Based Testing in Financial Systems CT-FT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   After a risk-based testing cycle, the test manager needs to report to the audit committee. The testing found that a high-risk area has a residual risk of a potential security breach. What should the test manager include in the report?

   • AThe residual risk and a recommendation to either mitigate it or accept it with justification.
   • BOnly the tests that were executed and their pass/fail status.
   • CA statement that all risks have been eliminated.
   • DA request for more budget to continue testing indefinitely.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A test team is executing tests for a payment system. The risk assessment has identified that the transaction authorization module has a high likelihood of defects and a high impact on security. The transaction logging module has a medium likelihood and a medium impact. The user notification module has a low likelihood and a low impact. The team has limited time and must decide the order of test execution. However, the transaction logging module is a prerequisite for the transaction authorization module, as it records the transactions that authorization relies on. How should the team sequence the tests?

   • ATest transaction logging first, then transaction authorization, then user notification.
   • BTest transaction authorization first, then transaction logging, then user notification.
   • CTest user notification first, as it is quickest.
   • DTest all modules in parallel to save time.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A bank is planning the test cycle for a core banking system upgrade. The project has a fixed deadline and limited testing resources. The risk assessment has identified that the payment processing module has a high likelihood of defects and a high impact on operations. The customer onboarding module has a medium likelihood and medium impact. The reporting module has a low likelihood and low impact. How should the test manager allocate the limited testing resources?

   • AAllocate resources equally across all three modules to ensure balanced coverage.
   • BAllocate the majority of resources to the payment processing module, with some to customer onboarding and minimal to reporting.
   • CFocus all resources on the payment processing module and skip the other modules.
   • DAllocate resources based on the complexity of each module, regardless of risk.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A financial institution is required to comply with the Sarbanes-Oxley Act (SOX) for financial reporting. The risk assessment shows that the financial reporting module has a high likelihood of errors and a high impact on compliance. How should the test team apply risk-based testing to support SOX compliance?

   • AFocus testing on modules that are easiest to test to save time.
   • BTest the financial reporting module more thoroughly than other modules.
   • CSkip testing the financial reporting module because it is too complex.
   • DTest all modules equally to ensure no compliance gaps.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In risk-based test design, what is the primary consideration when selecting test cases?

   • AThe availability of test data
   • BThe risk level of the functionality being tested
   • CThe complexity of writing the test cases
   • DThe number of test cases that can be executed in a day
   Reveal Solution Discussion Select an answer first