Which of the following is an example of a security vulnerability that might be identified during an architectural review?

A misspelled variable name in the code

Lack of encryption for sensitive data in transit between components

A user interface button that is not accessible

A database query that is not optimized

Which of the following is a key benefit of performing architectural reviews early in the software development lifecycle?

It ensures that the architecture is fully documented before any design decisions are made

It eliminates the need for test planning because the architecture defines all test cases

It reduces the cost of fixing defects by identifying architectural issues before they propagate into code

It guarantees that the final system will meet all performance requirements without further testing

What is the primary purpose of the preparation step in an architectural review?

To decide whether the review should be conducted at all

To fix any defects found during the review

To ensure that reviewers have the necessary materials and understanding to conduct a meaningful review

To schedule the review meeting and assign roles

What is the purpose of assigning a severity level to each finding in an architectural review report?

To decide whether the review should be repeated

To determine which team member should fix the issue

To prioritize the findings based on their potential impact on the system

To calculate the total cost of the review

During an architectural review of a new e-commerce platform, the team identifies that the architecture uses a monolithic design that may not scale well during peak shopping seasons. The team also notes that the architecture has a single database that could become a bottleneck. The project manager wants to address the most critical issue first. What should the review team recommend?

Defer both issues until after the next release and monitor performance.

Implement database sharding to distribute the load across multiple databases.

Refactor the monolithic architecture into microservices to improve scalability.

Prioritize the database bottleneck as the highest severity because it affects all transactions.

Certified Tester Advanced Level Technical Test Analyst

Domain 5Objective 2

Architectural Reviews CTAL-TTA Practice Questions (Page 2)

Part of the Domain 5: Reviews domain, which makes up ~8% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

Questions 6–10

6foundation · medium
Which of the following is an example of a security vulnerability that might be identified during an architectural review?
Select an answer first
7foundation · medium
Which of the following is a key benefit of performing architectural reviews early in the software development lifecycle?
Select an answer first
8foundation · medium
What is the primary purpose of the preparation step in an architectural review?
Select an answer first
9foundation · medium
What is the purpose of assigning a severity level to each finding in an architectural review report?
Select an answer first
10expert · hard
During an architectural review of a new e-commerce platform, the team identifies that the architecture uses a monolithic design that may not scale well during peak shopping seasons. The team also notes that the architecture has a single database that could become a bottleneck. The project manager wants to address the most critical issue first. What should the review team recommend?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CTAL-TTA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CTAL-TTA” is a trademark of its owner, used for identification only.