Risk Management CTEL-TM-OTM Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   During an operational test project, a risk was identified that a key team member might leave the project, causing delays. The risk was assessed as medium priority, and a mitigation plan was developed to cross-train other team members. Three months into the project, the team member announces their resignation. What should the test manager do?

   • AEscalate the risk to senior management and request additional budget to hire a replacement.
   • BClose the risk because the event has occurred and there is nothing more to do.
   • CImplement the mitigation plan by assigning the cross-trained team members to take over the departing member's tasks.
   • DWait to see if the departing member can stay longer before implementing the plan.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An operational test team is testing a new online banking feature. A risk is identified that a critical security vulnerability may be discovered during testing, which could delay the release. The test manager considers several responses. The organization has a strict policy that security issues must be fixed before release, and the test manager has limited budget for additional security testing. Which risk response strategy is most appropriate for this scenario?

   • AMitigate by conducting additional security testing and code reviews to reduce the likelihood of undiscovered vulnerabilities.
   • BAvoid the risk by canceling the feature release entirely.
   • CAccept the risk and proceed with the release, assuming the vulnerability will be fixed in a future patch.
   • DTransfer the risk by outsourcing security testing to a third-party vendor, even though it exceeds the budget.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   An operational test manager is prioritizing risks for a critical system upgrade. Two risks have been identified: Risk A has a likelihood of 4 (likely) and an impact of 3 (moderate). Risk B has a likelihood of 2 (unlikely) and an impact of 5 (catastrophic). The organization's risk matrix uses a 5x5 grid with color-coded zones (red, yellow, green). The test manager must decide which risk to address first, but resources are limited. What is the most appropriate action?

   • ATreat both risks as equal priority because they are both above the medium threshold on the risk matrix.
   • BPrioritize Risk A because its higher likelihood makes it more likely to occur, and address Risk B as a secondary priority.
   • CDefer both risks until quantitative analysis is performed to calculate the expected monetary value.
   • DPrioritize Risk B because the catastrophic impact, even with low likelihood, may place it in a high-risk zone depending on the matrix thresholds.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   An operational test manager is managing a project with a high-profile risk that could affect the release date. The risk has been communicated to the steering committee, and a mitigation plan is in place. During a weekly status meeting, a stakeholder asks for an update on the risk. What is the most appropriate way to communicate the risk status?

   • ARefer the stakeholder to the project plan, which contains the full risk details.
   • BProvide a concise update on the current likelihood and impact, the status of mitigation actions, and any changes since the last report.
   • CState that the risk is being managed and no further details are available.
   • DAvoid discussing the risk to prevent unnecessary alarm, and only report if the risk materializes.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   During operational testing of a new mobile app, the test manager identifies a risk that a critical third-party API used for user authentication may become unavailable during the test execution window. The team decides to build a mock service that simulates the API's responses so that testing can continue even if the real API fails. This is an example of which risk response strategy?

   • AAvoid
   • BTransfer
   • CMitigate
   • DAccept
   Reveal Solution Discussion Select an answer first