Integrating from External Sources CTEL-TM-OTM Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A test manager is updating the test plan for a financial application that handles sensitive customer data. The organization must comply with PCI DSS and also wants to adopt industry best practices for security testing. The test manager has identified a relevant OWASP testing guide. How should the test manager integrate these external sources into the test plan?

   • AInclude only OWASP recommendations because they are more current than PCI DSS
   • BInclude PCI DSS requirements as mandatory test conditions and use OWASP as a supplementary reference for test design
   • CReplace PCI DSS requirements with OWASP recommendations to simplify the test plan
   • DList both sources in the test plan but do not map them to specific test activities
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is an example of an external source that can provide testing-related information?

   • AThe test team's lessons-learned repository
   • BInternal defect management guidelines
   • CIndustry best practices published by a professional testing body
   • DThe organization's project management office (PMO) templates
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When evaluating an external source for use in testing, which factor is most important to consider?

   • AThe source's credibility and relevance to the testing context
   • BThe source's publication date is always the most critical factor
   • CThe source's length and level of detail
   • DThe source's popularity among testers
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A test manager is developing a test strategy for a new mobile banking app. The organization wants to ensure compliance with GDPR for handling personal data and also wants to follow industry best practices for mobile app testing. Which approach best integrates these external sources into the test strategy?

   • AFocus only on GDPR compliance testing and ignore industry best practices
   • BUse industry best practices as the primary basis and treat GDPR as optional
   • CIncorporate GDPR requirements as non-functional test conditions and use industry best practices to design functional test cases
   • DDocument both sources in the strategy but do not specify how they will be applied
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A test manager is working on a project for a government agency that requires adherence to specific accessibility standards. The project team is unfamiliar with the relevant standards. Which external source should the test manager identify as the primary reference for accessibility testing?

   • AIEEE 829 test documentation standard
   • BISO 25010 quality model
   • CISO 9001 quality management standard
   • DWCAG (Web Content Accessibility Guidelines)
   Reveal Solution Discussion Select an answer first