A TTA is working on a project to upgrade a legacy inventory system. The project manager wants to identify risks early. The TTA decides to use a risk identification workshop. Which of the following is the most important factor for the success of this workshop?

Limiting the workshop to only the most senior technical staff to avoid disagreements.

Ensuring the workshop is held in a comfortable meeting room with good catering.

Focusing only on technical risks to keep the workshop short and efficient.

Involving a diverse group of stakeholders, including developers, testers, business analysts, and operations staff.

During risk analysis for a healthcare system, the TTA identifies a risk that the new patient data encryption module may not be compatible with the legacy database. The team estimates the likelihood of this risk as 'high' because the legacy database is outdated and poorly documented. The impact, if it occurs, would be a complete loss of patient data access for several hours. How should the TTA classify the level of risk?

Medium, because the impact is limited to a few hours of downtime.

Cannot be determined without a formal risk matrix.

High, because both likelihood and impact are high.

Low, because the risk is only related to a single module.

A Technical Test Analyst is planning a risk identification workshop for a new financial application. Which of the following is a recognized source of information for identifying technical risks?

The defect management tool's statistics from the current project

The project's risk register from a previous similar project

The final test report from the current project

A TTA is creating a test strategy for a new system. The risk assessment shows that the 'user profile' module has a medium risk level, while the 'payment processing' module has a high risk level. The project has a fixed deadline and limited resources. What is the best way to allocate testing effort?

Test the user profile module more because it is used by all users.

Allocate more test cases to the payment processing module and fewer to the user profile module.

Allocate the same number of test cases to both modules to ensure fairness.

Test only the payment processing module and skip the user profile module.

What is the primary purpose of risk monitoring and control in the test process?

To calculate the risk level for each identified risk

To create the initial risk list at the start of the project

To eliminate all risks from the project

To track identified risks and detect new ones throughout the project

Certified Tester Advanced Level Technical Test Analyst

Domain 1Objective 3

Risk Assessment CTAL-TTA Practice Questions (Page 5)

Part of the Domain 1: The Technical Test Analyst's Tasks in Risk-Based Testing domain, which makes up ~12% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

Questions 21–25

21application · medium
A TTA is working on a project to upgrade a legacy inventory system. The project manager wants to identify risks early. The TTA decides to use a risk identification workshop. Which of the following is the most important factor for the success of this workshop?
Select an answer first
22application · medium
During risk analysis for a healthcare system, the TTA identifies a risk that the new patient data encryption module may not be compatible with the legacy database. The team estimates the likelihood of this risk as 'high' because the legacy database is outdated and poorly documented. The impact, if it occurs, would be a complete loss of patient data access for several hours. How should the TTA classify the level of risk?
Select an answer first
23foundation · easy
A Technical Test Analyst is planning a risk identification workshop for a new financial application. Which of the following is a recognized source of information for identifying technical risks?
Select an answer first
24application · medium
A TTA is creating a test strategy for a new system. The risk assessment shows that the 'user profile' module has a medium risk level, while the 'payment processing' module has a high risk level. The project has a fixed deadline and limited resources. What is the best way to allocate testing effort?
Select an answer first
25foundation · easy
What is the primary purpose of risk monitoring and control in the test process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CTAL-TTA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CTAL-TTA” is a trademark of its owner, used for identification only.