Risk Identification CTAL-TTA Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   A test team is testing a system that processes sensitive customer data. The test environment is a clone of production, but the test data is anonymized. The technical test analyst is concerned that the anonymization process may not be complete, and some real customer data may remain. Which risk should be documented?

   • AThe test data may not be representative of production data.
   • BIncomplete anonymization may lead to a data privacy breach during testing.
   • CThe project schedule may be delayed due to data preparation.
   • DThe test environment may not be fast enough for performance testing.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A technical test analyst is planning a risk identification workshop for a project with a tight deadline. The analyst wants to ensure that schedule-related risks are not missed. Which stakeholder should be specifically included in the workshop?

   • AThe security expert, who can provide insight into security risks.
   • BThe end users, who can provide insight into usability risks.
   • CThe project manager, who can provide insight into schedule constraints and resource availability.
   • DThe database administrator, who can provide insight into data-related risks.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A test team is about to start system testing. The test environment is a virtual machine that is also used by developers for their own testing. The technical test analyst is concerned about the integrity of test results. Which risk should be documented?

   • AThe system may have a security vulnerability in the login module.
   • BDevelopers may change the environment configuration, causing test results to be invalid.
   • CThe test data may not be representative of production data.
   • DThe project manager may not allocate enough time for testing.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A technical test analyst is leading a risk identification workshop for a new e-commerce platform. The team includes developers, business analysts, and operations staff. The analyst wants to ensure that risks related to performance under peak load and security vulnerabilities are not overlooked. Which approach best supports comprehensive risk identification in this context?

   • AReview the code for known security vulnerabilities using an automated static analysis tool.
   • BAsk the operations staff to describe past incidents and assume the same risks will recur.
   • CAsk the business analysts to list all functional requirements and convert each into a potential test case.
   • DConduct a brainstorming session with the full team, then use a checklist of common product risk categories to prompt additional risks.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A technical test analyst is planning the test phase for a project that has a fixed release date. The development team is two weeks behind schedule, and the test environment is shared with another project. Which of the following is a project risk that should be documented?

   • AThe payment gateway integration might fail under high load.
   • BThe test environment may not be available when needed, causing delays in test execution.
   • CThe requirements document contains ambiguous wording about user roles.
   • DThe login page may have a usability issue that frustrates users.
   Reveal Solution Discussion Select an answer first