Risk Assessment CTAL-TTA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is an example of a risk mitigation strategy?

   • ACalculating the risk level using likelihood and impact
   • BAdding more test cases for high-risk areas
   • CRecording the risk in the risk register
   • DReviewing the risk level at the end of each iteration
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A Technical Test Analyst (TTA) is preparing risk identification for a new online banking application. The project manager has asked the TTA to focus only on technical risks from the code and architecture. The TTA has access to the requirements document, the architecture design, and the development team. Which approach best supports comprehensive risk identification for this project?

   • AAsk the project manager to provide a list of risks based on their experience with previous projects.
   • BPerform a detailed code review of all modules to identify potential defects that could lead to system failures.
   • CUse only the architecture design to identify risks related to performance and security.
   • DConduct a structured brainstorming session with developers, testers, and business analysts, using the architecture design and requirements as input.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   In a risk analysis session, the team is assessing the risk of a new authentication system failing. They have historical data from similar projects showing that such systems have a 70% chance of having integration issues. The impact of a failure is rated as 'catastrophic' because it would lock out all users. How should the team rate the likelihood of this risk?

   • AHigh, based on the historical data of 70% occurrence.
   • BMedium, because the data is from similar projects, not this exact one.
   • CCannot be determined without a prototype.
   • DLow, because the team has good developers who can avoid these issues.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A TTA is evaluating risks for a new online payment system. The following risks have been identified: Risk A: Credit card data breach (likelihood: low, impact: very high). Risk B: Slow page load times (likelihood: high, impact: medium). Risk C: Incorrect currency conversion (likelihood: medium, impact: high). Risk D: UI text typos (likelihood: high, impact: low). The team has limited time for testing. Which risk should be addressed FIRST in the test plan?

   • ARisk B: Slow page load times.
   • BRisk A: Credit card data breach.
   • CRisk D: UI text typos.
   • DRisk C: Incorrect currency conversion.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   During the testing of a new CRM system, the TTA discovers that a third-party API used for address validation is frequently returning errors. This was not identified as a risk during the initial risk assessment. What should the TTA do?

   • ADocument the issue in the final test report but do not change the current test plan.
   • BUpdate the risk register with this new risk, assess its likelihood and impact, and adjust the test plan accordingly.
   • CStop all testing until the API issue is resolved by the vendor.
   • DContinue with the existing test plan because the risk was not identified in the initial assessment.
   Reveal Solution Discussion Select an answer first