Risk Assessment CTAL-TTA Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   A Technical Test Analyst is analyzing a risk that a new authentication module may fail under high load. Which activity is part of risk analysis?

   • AEstimating the likelihood of the failure and the impact on users
   • BDocumenting the risk in the risk register
   • CComparing the risk level to a threshold to decide if it needs action
   • DDeciding to add more load testing to the test plan
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A TTA is developing a risk-based test strategy for a new mobile banking app. The risk analysis shows that the login and authentication module has a very high risk level, while the 'view transaction history' module has a low risk level. The test budget is limited. How should the TTA allocate testing effort?

   • ATest the transaction history module more because it is used more frequently by customers.
   • BAllocate a larger proportion of the test effort to the login and authentication module, and a smaller proportion to the transaction history module.
   • CAllocate equal effort to all modules to ensure complete coverage.
   • DFocus all testing effort on the login module and skip testing the transaction history module.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   During the testing of a new system, the TTA discovers that a critical third-party component has a known security vulnerability. This was not identified during the initial risk assessment. The vulnerability could be exploited, but the likelihood is uncertain. What should the TTA do?

   • AIgnore it because it was not in the initial risk assessment.
   • BDocument it in the final test report but do not change the test plan.
   • CStop all testing until the vulnerability is fixed by the vendor.
   • DAdd this as a new risk, assess its likelihood and impact, and determine if additional testing or mitigation is needed.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A TTA is analyzing risks for a new system. The team has identified a risk that the system may not handle the expected peak load during the holiday season. The likelihood is assessed as 'medium' based on past performance of similar systems, but the impact is 'very high' because a system crash would result in significant revenue loss. The project manager wants to reduce the risk. Which mitigation strategy is most effective?

   • AIncrease the number of servers in the production environment to handle the load.
   • BConduct load and performance testing to verify the system's capacity and identify bottlenecks.
   • CDefer the system launch until after the holiday season.
   • DReduce the expected peak load estimate to make the risk seem lower.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   In risk evaluation, how is the level of risk typically calculated?

   • ALikelihood multiplied by impact
   • BImpact minus likelihood
   • CThe sum of likelihood and impact
   • DLikelihood divided by impact
   Reveal Solution Discussion Select an answer first