Risk Identification CTAL-TTA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A technical test analyst is organizing a risk identification session for a new healthcare system. The analyst wants to ensure that risks related to patient safety and data privacy are identified. Which stakeholders should be invited to the session?

   • ADevelopers, business analysts, and a security expert.
   • BOnly the developers who wrote the code.
   • COnly the test team members.
   • DOnly the project manager and the product owner.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   During a code review, a Technical Test Analyst observes that a module has many nested conditional statements and a high cyclomatic complexity. Which design or code risk does this primarily indicate?

   • ATight coupling
   • BDead code
   • CLow cohesion
   • DHigh complexity
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   A technical test analyst is reviewing requirements for a system that will be used in multiple countries. The requirements are written in English, but the development team is in a non-English-speaking country. The analyst notices that some terms have different meanings in different contexts. Which risk should be documented?

   • AThe project schedule may be delayed because the team is not native English speakers.
   • BThe test environment may not support the required languages.
   • CThe system may have a security vulnerability due to the use of multiple languages.
   • DMisinterpretation of ambiguous terms may lead to incorrect implementation and testing.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A technical test analyst has identified several risks during a workshop, including a high-impact security risk and a low-likelihood performance risk. What is the most appropriate way to document these risks for further analysis?

   • ACreate a detailed report for the security risk and a brief note for the performance risk.
   • BDocument only the high-impact security risk, as it is more important.
   • CDiscuss the risks with the project manager and decide informally which to address.
   • DRecord both risks in a risk register with their likelihood and impact ratings.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A technical test analyst is facilitating a risk identification session for a system with complex business rules. The team is struggling to think of risks beyond the obvious functional ones. Which technique would be most effective in prompting the team to consider a wider range of risks?

   • AReview the code line by line to find potential defects.
   • BUse a checklist of common risk categories such as performance, security, usability, and reliability.
   • CAsk the project manager to list all risks they have seen in previous projects.
   • DAsk each team member to write down their own risks silently and then share them.
   Reveal Solution Discussion Select an answer first