ISTQB Test Levels and Types 2 — Questions and Answers
Question 1: Which test type evaluates quality characteristics such as performance, security, and usability?
- Functional testing
- Non-functional testing (Correct answer)
- Structural testing
- Regression testing
Correct answer: Non-functional testing
Non-functional testing evaluates how well the system performs its functions, covering quality attributes like performance, security, reliability, and usability.
Question 2: What is the primary purpose of regression testing?
- Test new functionality added in a release
- Verify that recent changes have not adversely affected existing functionality (Correct answer)
- Perform exploratory testing across the entire system
- Validate user acceptance criteria
Correct answer: Verify that recent changes have not adversely affected existing functionality
Regression testing confirms that previously working software continues to work correctly after code changes, bug fixes, or configuration changes.
Question 3: Confirmation testing (re-testing) is BEST described as:
- Testing new features to confirm they meet requirements
- Re-executing failed tests to verify a specific defect has been fixed (Correct answer)
- Running a full regression suite after every change
- Validating system performance after a fix
Correct answer: Re-executing failed tests to verify a specific defect has been fixed
Confirmation testing re-executes the specific test cases that previously failed to verify that the reported defect has been successfully resolved.
Question 4: Which of the following is an example of functional testing?
- Measuring page load time under 1,000 concurrent users
- Checking that sensitive data is encrypted in transit
- Verifying that a login form rejects invalid credentials (Correct answer)
- Assessing the intuitiveness of the navigation menu
Correct answer: Verifying that a login form rejects invalid credentials
Functional testing evaluates what the system does — verifying specific behaviors against functional requirements, such as authentication logic.
Question 5: Structural testing (white-box testing) derives test cases primarily from:
- User requirements and business rules
- The internal code structure, such as control flow or data flow (Correct answer)
- Business risk assessments
- Historical defect data from prior releases
Correct answer: The internal code structure, such as control flow or data flow
Structural testing uses knowledge of the system's internal implementation — code paths, branches, conditions — to design test cases.
Question 6: Which test type specifically targets vulnerabilities and attempts to find unauthorized access to system data?
- Usability testing
- Reliability testing
- Security testing (Correct answer)
- Compatibility testing
Correct answer: Security testing
Security testing evaluates whether the system protects data and maintains intended functionality by probing for vulnerabilities and unauthorized access points.
Question 7: According to ISTQB, maintenance testing is triggered by:
- The initial development phase of a new system
- Modifications, migrations, or retirement of an existing system (Correct answer)
- Performance degradation detected during operations
- User acceptance testing failures
Correct answer: Modifications, migrations, or retirement of an existing system
Maintenance testing is performed when an existing operational system undergoes changes (enhancements, fixes), migration to another platform, or retirement.
ISTQB Test Levels and Types 2
Which test type evaluates quality characteristics such as performance, security, and usability?