ISTQB - International Software Testing Qualifications Board Risk-Based Testing Strategies Questions and Answers — Questions and Answers
Question 1: A test team is applying a risk-based testing strategy to an e-commerce application. The team identifies that the payment processing module is built with complex, new technology and a failure would have a severe financial impact. According to risk-based principles, how should this information primarily influence the test strategy?
- Assign only junior testers to the module to see how intuitive it is.
- Decrease the amount of testing for this module to fast-track the release.
- Allocate more experienced testers and conduct more in-depth testing on this module. (Correct answer)
- Delay testing of this module until all other features have been fully tested.
Correct answer: Allocate more experienced testers and conduct more in-depth testing on this module.
Risk-based testing directs the testing effort to be proportional to the level of risk. [13] A module with high complexity (increasing likelihood of failure) and severe financial impact is considered high-risk. Therefore, it requires more intensive and in-depth testing, often carried out by more experienced personnel, to mitigate the risk of failure in the live environment. [4, 16]
Question 2: Which of the following activities is a key part of the risk analysis (or risk assessment) phase within a risk-based testing approach?
- Executing all planned test cases and logging the results.
- Implementing changes to the code to fix the identified risks.
- Determining the likelihood and impact of each identified risk item. (Correct answer)
- Purchasing new test automation tools for the project.
Correct answer: Determining the likelihood and impact of each identified risk item.
The risk analysis or assessment phase is specifically concerned with evaluating the identified risks to determine their level. This is typically done by assessing two key dimensions: the likelihood (probability) of the risk occurring and the potential impact (or harm) if it does occur. [6, 7, 11] This assessment allows the team to prioritize the risks for mitigation and testing. [3]
Question 3: A project is experiencing frequent delays in receiving testable builds from the development team and a shortage of skilled testing staff. In the context of risk-based testing, how are these risks BEST categorized?
- Product Risks
- Business Risks
- Project Risks (Correct answer)
- Technical Risks
Correct answer: Project Risks
Project risks are those that relate to the management and control of the project, affecting its ability to achieve its objectives on time and within budget. [10, 13] Delays in deliverables and staff shortages are classic examples of organizational and people issues that impact the project's schedule and resources, rather than the intrinsic quality of the software itself. [6, 12, 18]
Question 4: A team is using a risk-based approach for a new mobile banking application. They have identified a risk item: 'Incorrect calculation of interest on savings accounts.' They assess the likelihood as 'low' but the impact as 'very high'. What is the most appropriate testing response?
- Perform minimal testing since the likelihood is low.
- Prioritize this area for thorough and rigorous testing. (Correct answer)
- Delegate this testing to the business analysts.
- Ignore this risk as it is unlikely to happen.
Correct answer: Prioritize this area for thorough and rigorous testing.
In risk-based testing, both likelihood and impact determine the priority. Even if the likelihood of a failure is low, a very high impact (e.g., financial loss, reputational damage) makes it a significant risk. [3] Therefore, such areas must be prioritized for thorough testing to ensure the potential failure is prevented. [2, 11]
Question 5: Which of the following is the PRIMARY goal of implementing a risk-based testing strategy?
- To test every possible feature with equal priority.
- To eliminate the need for regression testing.
- To optimize testing efforts by focusing on the most critical areas. (Correct answer)
- To ensure the project is completed under budget, regardless of quality.
Correct answer: To optimize testing efforts by focusing on the most critical areas.
The primary goal of risk-based testing is to optimize the allocation of limited testing resources (time, people, budget) by concentrating effort on the parts of the application that pose the greatest risk to the business or users if they fail. [2, 3, 5, 14] This ensures that the most critical defects are found early and that testing is both efficient and effective. [1]
Question 6: During the risk identification process for an online ticket booking system, the team is brainstorming potential failure areas. Which of the following is the BEST example of a product risk?
- The lead performance tester might leave the company mid-project.
- The third-party payment gateway may be delivered late.
- The system may fail to correctly apply a multi-booking discount. (Correct answer)
- The test environment may not be ready on the scheduled start date.
Correct answer: The system may fail to correctly apply a multi-booking discount.
Product risks, also known as quality risks, are related to potential failures of the software itself. [10, 13] An incorrect discount calculation is a failure of the product's functionality. [10] The other options are examples of project risks, as they concern personnel, suppliers, and environments, all of which impact the project's execution rather than the product's intrinsic quality. [12, 18]
ISTQB - International Software Testing Qualifications Board Risk-Based Testing Strategies Questions and Answers
A test team is applying a risk-based testing strategy to an e-commerce application.
The team identifies that the payment processing module is built with complex, new technology and a failure would have a severe financial impact.
According to risk-based principles, how should this information primarily influence the test strategy?