Risk-Based Testing Strategies Flashcards
7 cards from real ISTQB practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk-Based Testing Strategies flashcards as text
In risk-based testing, 'risk mitigation' through testing means:
Answer: Reducing risk likelihood or impact by finding and fixing defects
Testing mitigates risk by detecting defects early; fixing those defects reduces the likelihood or impact of failures occurring in production.
Which factor is LEAST relevant when assessing the likelihood of a software risk?
Answer: Color scheme chosen for the user interface
UI color scheme has no bearing on the likelihood of a functional or technical risk materializing; complexity, developer experience, and usage frequency all influence likelihood.
A test manager is asked to cut 30% of the test suite due to schedule pressure. How should a risk-based approach guide this decision?
Answer: Remove tests covering the lowest-risk areas to preserve coverage of critical functionality
Risk-based testing calls for deprioritizing or removing tests on lower-risk areas first, ensuring the remaining effort is concentrated where failures would be most harmful.
What does 'residual risk' mean after testing is completed?
Answer: The risk that remains after testing and mitigation activities have been applied
Residual risk is the level of risk that persists after all planned testing and other mitigations have been performed; it is typically accepted by stakeholders before release.
Which ISTQB document or artifact formally records the risk-based testing approach and how risks influence the testing strategy?
Answer: Test plan
The test plan includes the risk-based testing approach, identifying how product risks drive test scope, priorities, effort allocation, and exit criteria.
How does risk-based testing handle a situation where two features have equal risk exposure but very different impact scores?
Answer: The feature with higher impact is typically tested more thoroughly due to potential consequence severity
When risk exposure is equal, testers often give priority to higher-impact risks because a failure there would cause more severe harm even though likelihood is lower.
Which technique is commonly used during risk identification workshops to systematically elicit potential failure modes?
Answer: Failure Mode and Effect Analysis (FMEA)
FMEA is a structured technique used to identify potential failure modes, their causes, and their effects, making it valuable for risk identification in testing.