A navigation app is being tested for use while driving. Testers need to verify that when an incoming call interrupts the turn-by-turn voice guidance, the app resumes correctly after the call ends. Which test should be performed?

Verify that the app continues to provide voice guidance while the phone is on silent mode.

Test the app's behavior when the device is locked and then unlocked during navigation.

Check that the app's map updates correctly when the user changes the route manually.

Simulate an incoming call during active navigation and verify that the app pauses guidance and resumes after the call is declined.

A banking app stores a user's authentication token locally to keep them logged in. A security review flags that the token is stored in plain text in shared storage. Which security testing approach should the team use to verify the risk and then validate the fix?

Review the app's privacy policy to ensure it discloses how authentication data is stored.

Conduct a penetration test on the app's backend server to see if the token can be intercepted during transmission.

Use a rooted device to inspect the app's data directory and confirm the token is readable, then after the fix, repeat the inspection to verify it is no longer accessible.

Perform a static analysis of the app's code to identify insecure storage APIs, then re-run after the fix to confirm the token is stored in the secure enclave.

A navigation app is used for long road trips. The team is concerned about battery drain and memory usage over extended use. They also need to ensure the app recovers if the OS kills it due to memory pressure. Which testing approach is most effective?

Run the app for several hours on a device, monitoring battery and memory, and then simulate memory pressure to see if the app restarts correctly.

Use a memory profiling tool to check for leaks, but do not test battery.

Simulate a low-battery warning and verify the app reduces its functionality.

Test the app for 30 minutes on a device and check the battery percentage drop.

Which of the following is a security risk specific to mobile apps?

Slow response on low-end devices

Insecure data storage on the device

Incorrect display of text on small screens

A music streaming app must provide a seamless experience when users move between Wi-Fi and cellular networks. The team is considering two approaches: (1) pre-buffering more audio data to avoid interruptions, or (2) reducing audio quality during transitions. They need to test which approach better balances user experience and data usage. Which testing strategy would provide the most useful data?

Test both approaches in a lab with simulated networks, but only measure playback interruptions.

Test both approaches on a device with a metered data plan, measuring data consumption and the number of playback interruptions during network transitions.

Ask users to rate their satisfaction with each approach in a survey after using the app for a week.

Test only the pre-buffering approach because it is simpler to implement.

Certified Tester Mobile Application Testing

Domain 3Objective 1

Common Test Types Applicable for Mobile Application CT-MAT Practice Questions (Page 1)

Part of the Common Test Types and Test Process for Mobile Applications domain, which makes up ~22% of our current practice bank. ISTQB does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 1–5

1application · medium
A navigation app is being tested for use while driving. Testers need to verify that when an incoming call interrupts the turn-by-turn voice guidance, the app resumes correctly after the call ends. Which test should be performed?
Select an answer first
2application · medium
A banking app stores a user's authentication token locally to keep them logged in. A security review flags that the token is stored in plain text in shared storage. Which security testing approach should the team use to verify the risk and then validate the fix?
Select an answer first
3expert · hard
A navigation app is used for long road trips. The team is concerned about battery drain and memory usage over extended use. They also need to ensure the app recovers if the OS kills it due to memory pressure. Which testing approach is most effective?
Select an answer first
4foundation · easy
Which of the following is a security risk specific to mobile apps?
Select an answer first
5expert · hard
A music streaming app must provide a seamless experience when users move between Wi-Fi and cellular networks. The team is considering two approaches: (1) pre-buffering more audio data to avoid interruptions, or (2) reducing audio quality during transitions. They need to test which approach better balances user experience and data usage. Which testing strategy would provide the most useful data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-MAT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-MAT” is a trademark of its owner, used for identification only.