Risk-Based Testing Strategies Flashcards
7 cards from real ISTQB practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk-Based Testing Strategies flashcards as text
In risk-based testing, what does 'risk exposure' represent?
Answer: The product of likelihood and impact of a risk
Risk exposure is calculated as the product of the probability (likelihood) that a risk will occur and the impact it would have if it did occur.
Which activity is MOST closely associated with the 'risk identification' phase in risk-based testing?
Answer: Brainstorming sessions with stakeholders to list potential risks
Risk identification involves techniques like brainstorming, expert interviews, and checklists to enumerate potential product and project risks.
A project team discovers a new critical defect late in the cycle affecting a medium-risk module. What should they do FIRST under a risk-based approach?
Answer: Re-assess the module's risk level given the new information
Risk-based testing requires continuous risk re-assessment; a critical defect in a medium-risk module may elevate that module's risk level and change testing priorities.
Which of the following BEST describes 'product risk' in the context of ISTQB risk-based testing?
Answer: The possibility that the software will fail to satisfy stakeholder needs
Product risk relates to potential quality problems in the software itself, such as failures that harm users or the business, as opposed to project risks which affect the project process.
When using a risk matrix to prioritize testing, a feature is rated 'high likelihood' and 'low impact.' Where should testing effort be directed relative to a 'low likelihood, high impact' feature?
Answer: More effort on the low likelihood/high impact feature
Although both cells may yield similar risk exposure, high impact risks often receive more attention because their consequences are more severe if they occur.
Which statement about risk-based test prioritization is CORRECT?
Answer: Higher-risk test cases are run earlier so critical defects are found sooner
Running higher-risk tests early ensures that the most critical defects are discovered while there is still time to fix them and re-test.
What is the PRIMARY purpose of a 'risk register' in a testing project?
Answer: To document identified risks, their assessments, and mitigation actions
A risk register is a living document that captures each identified risk, its likelihood and impact ratings, owner, and planned mitigations or contingencies.