Overview CTAL-TTA Practice Questions (Page 5)

Questions 21–24

1. 21application · medium

   A test analyst is preparing a test strategy for a new financial application. The application handles sensitive data and must be highly reliable. The analyst wants to combine techniques to maximize defect detection. Which combination of activities best leverages both static and dynamic analysis?

   • ARun automated static analysis on the codebase and perform fault injection during system testing.
   • BUse only automated static analysis tools with all warnings enabled.
   • CConduct a code review and a walkthrough of the same documents.
   • DPerform performance testing and memory analysis only.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A team is developing a mobile application. The code is not yet complete, but the team wants to check the code for potential security vulnerabilities, such as SQL injection and insecure data storage, before the first build is available. Which analysis activity is most appropriate?

   • AConduct a manual code review focusing on security, involving all developers.
   • BWait for the first build and perform dynamic security testing on the running application.
   • CDefer security analysis until the application is in production and monitor for attacks.
   • DRun a static analysis security tool on the source code.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a key difference between static and dynamic analysis?

   • ADynamic analysis finds defects earlier than static analysis
   • BStatic analysis requires a running system; dynamic analysis does not
   • CDynamic analysis is always automated; static analysis is always manual
   • DStatic analysis can be performed on design documents; dynamic analysis cannot
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A team is testing a new real-time data processing system. The system must handle a high volume of data with low latency. The team has completed functional testing and now wants to verify that the system meets its performance requirements under peak load. Which dynamic analysis technique is most appropriate?

   • AConduct a code review focused on algorithmic efficiency.
   • BPerform memory analysis to check for memory leaks.
   • CUse a static analysis tool to check the code for performance bottlenecks.
   • DRun a performance test that simulates peak load and measures response times and throughput.
   Reveal Solution Discussion Select an answer first