Principles of Risk-Based Testing in Financial Systems CT-FT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A test manager is introducing risk-based testing to a team that is used to exhaustive testing. The team is concerned that risk-based testing might miss defects in low-risk areas. What is the best explanation for why risk-based testing is appropriate?

   • ARisk-based testing is required by all financial regulations.
   • BRisk-based testing focuses testing effort on areas where defects would have the greatest impact, accepting some residual risk in low-risk areas.
   • CRisk-based testing is cheaper than exhaustive testing, so it is preferred.
   • DRisk-based testing ensures that all defects are found, regardless of risk.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In risk-based test planning, how should resources be allocated?

   • AEqually across all test areas to ensure fairness
   • BMore resources to higher-risk areas and fewer to lower-risk areas
   • CBased on the availability of testers
   • DBased on the complexity of the test environment
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   After a risk-based testing cycle, the test manager must report to the board of directors. The testing revealed that a high-risk area has a residual risk of a potential data breach, and a low-risk area has a residual risk of a minor user interface glitch. The board is concerned about the data breach risk. What should the test manager communicate?

   • AOnly the residual risk of the data breach, as the UI glitch is not important.
   • BA statement that all risks have been mitigated.
   • CThe residual risk of the data breach, along with a recommendation for mitigation, and the residual risk of the UI glitch as a lower priority.
   • DA request for more testing time to eliminate all residual risks.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   After completing risk-based testing of a payment gateway, the test manager needs to communicate the results to stakeholders. The testing revealed that a low-risk area still has a known defect that will not be fixed before release. What should the test manager communicate?

   • AA request for more testing time to fix the defect before release.
   • BAn assurance that the defect is not important because the area is low risk.
   • CThe residual risk associated with the known defect, along with a recommendation for mitigation or acceptance.
   • DOnly the resolved defects and the overall pass rate.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   When assessing risks for testing prioritization, which two factors are typically combined to determine the level of risk?

   • ACost and schedule
   • BLikelihood and impact
   • CTest coverage and defect density
   • DComplexity and size
   Reveal Solution Discussion Select an answer first