ISTQB Certified Tester Advanced Level - Test Automation Engineer (CTAL-TAE) — Questions and Answers

Question 1: What is idempotency in REST API testing?

Calling the same endpoint multiple times produces the same result without additional side effects (Correct answer)
An endpoint that always returns the same data
An endpoint that cannot be cached
A test that always passes

Correct answer: Calling the same endpoint multiple times produces the same result without additional side effects

An idempotent operation (like GET, PUT, DELETE) produces the same server state regardless of how many times it is called with the same input.

Question 2: Which Gherkin keyword is used to define a specific individual test scenario in a feature file?

Feature
Background
Scenario (Correct answer)
Examples

Correct answer: Scenario

'Scenario' is the Gherkin keyword used to describe and introduce a specific test case within a feature file.

Question 3: What is the 'outside-in' testing approach associated with BDD?

Starting with database-layer tests and moving outward toward the UI layer
Running tests from an external environment targeting an internal staging server
Starting with high-level acceptance tests and working inward toward lower-level unit tests (Correct answer)
Testing external third-party APIs before testing internal application components

Correct answer: Starting with high-level acceptance tests and working inward toward lower-level unit tests

The outside-in approach begins with high-level BDD acceptance tests that define the feature, then drives development of the inner components needed to satisfy those outer tests.

Question 4: What does TDD stand for in software testing?

Test-Driven Development (Correct answer)
Test Data Dictionary
Test-Defined Design
Technical Deployment Diagram

Correct answer: Test-Driven Development

TDD stands for Test-Driven Development, a practice where tests are written before the actual production code is implemented.

Question 5: What's the connection between RGB and Pixel Tolerance?

Bitmap checkpointAll (Correct answer)
of the above
Image checkpointkpoint (Correct answer)
None of the above

Correct answer: Bitmap checkpointAll

RGB values and Pixel Tolerance are directly connected to Bitmap or Image checkpoints in UFT/QTP. RGB values represent the color of each pixel, and Pixel Tolerance defines the permissible difference in these color values between the expected (baseline) image and the actual image captured during test execution. This tolerance is crucial for preventing minor, visually insignificant pixel variations from causing a checkpoint to fail.

Question 6: What does an HTTP 401 Unauthorized response mean?

The request requires valid authentication credentials that were not provided or are invalid (Correct answer)
The user lacks permission for the resource
The resource does not exist
The server encountered an error

Correct answer: The request requires valid authentication credentials that were not provided or are invalid

HTTP 401 indicates missing or invalid authentication credentials; the client must authenticate to get access.

Question 7: In BDD, what is a 'feature file'?

A configuration file for the test automation framework
A file that stores test execution results and screenshots
A plain-text file containing Gherkin scenarios describing application behavior (Correct answer)
A source code file containing step definition implementations

Correct answer: A plain-text file containing Gherkin scenarios describing application behavior

A feature file is a plain-text document written in Gherkin syntax describing the features and scenarios of an application in business-readable language understandable by all stakeholders.

Question 8: Which Selenium component provides a grid for running tests in parallel across multiple machines and browsers?

Selenium Hub
Selenium RC
Selenium IDE
Selenium Grid (Correct answer)

Correct answer: Selenium Grid

Selenium Grid allows distributed test execution across multiple nodes, browsers, and operating systems simultaneously.

Question 9: Which Selenium WebDriver method is used to navigate to a URL?

driver.navigate(url)
driver.open(url)
driver.get(url) (Correct answer)
driver.load(url)

Correct answer: driver.get(url)

driver.get(url) loads a new web page in the current browser window in Selenium WebDriver.

Question 10: Which open-source tool is widely used in the US for load and performance testing of web applications?

k6
Gatling
Apache JMeter (Correct answer)
Locust

Correct answer: Apache JMeter

Apache JMeter is the most widely adopted open-source load testing tool in US enterprises, supporting HTTP, JDBC, and other protocols.

Question 11: Which CI/CD tool uses .gitlab-ci.yml to define automated pipeline jobs?

GitLab CI/CD (Correct answer)
Jenkins
GitHub Actions
CircleCI

Correct answer: GitLab CI/CD

GitLab CI/CD reads pipeline configuration from a .gitlab-ci.yml file in the repository root to define stages and jobs.

Question 12: In functional testing, what should an assertion primarily verify?

The expected outcome of a behavior (Correct answer)
The CPU usage of the browser
The network bandwidth
The number of test files

Correct answer: The expected outcome of a behavior

Assertions check that actual results match expected functional outcomes.

Question 13: What is the difference between driver.close() and driver.quit() in Selenium?

close() closes the current window; quit() closes all windows and ends the session (Correct answer)
quit() closes one tab; close() ends the session
They are identical
close() is deprecated

Correct answer: close() closes the current window; quit() closes all windows and ends the session

driver.close() closes only the active browser window while driver.quit() terminates the entire WebDriver session and all associated windows.

Question 14: Which gesture does Appium's TouchAction class support for mobile testing?

Mouse click and keyboard input only
Swipe, tap, long press, and pinch (Correct answer)
Screenshot capture
Drag and drop on web only

Correct answer: Swipe, tap, long press, and pinch

Appium's TouchAction API supports mobile-specific gestures including swipe, tap, long press, pinch, and zoom.

Question 15: What is a 'pipeline as code' approach?

Defining CI/CD pipeline configuration in version-controlled files rather than a GUI (Correct answer)
Writing application code inside the CI tool
Generating tests using AI tools
Deploying pipelines to production directly

Correct answer: Defining CI/CD pipeline configuration in version-controlled files rather than a GUI

Pipeline as code stores pipeline definitions in files (like Jenkinsfile or .yml) in source control, enabling versioning and peer review.

Question 16: What does mocking an API dependency mean in test automation?

Testing an API that has no documentation
Generating API load
Simulating the API's behavior with a fake server so tests run independently of the real service (Correct answer)
Running tests against a staging server

Correct answer: Simulating the API's behavior with a fake server so tests run independently of the real service

API mocking creates a simulated server that returns predefined responses, allowing tests to run without depending on external services.

Question 17: What is the primary purpose of API response time assertion in automated tests?

To verify HTTP status codes
To check authentication
To validate response data types
To ensure the API meets performance SLAs and doesn't degrade under normal conditions (Correct answer)

Correct answer: To ensure the API meets performance SLAs and doesn't degrade under normal conditions

Response time assertions catch performance regressions by verifying APIs respond within acceptable time thresholds defined in SLAs.

Question 18: In the Keyword view, which of the following are the four main columns?

Item, Operation, Value, Documentation (Correct answer)
Number, Operation, Value, Documentation
Item, Operation, Property, Documentation
Item, Operation, Value, Comments

Correct answer: Item, Operation, Value, Documentation

The Keyword View in UFT/QTP provides a structured, table-like interface for viewing and editing test steps. Its four main columns are 'Item,' which identifies the object or step; 'Operation,' which specifies the action performed; 'Value,' which holds any data or parameters for the operation; and 'Documentation,' for adding descriptive comments to each step.

Question 19: What is SpecFlow primarily used for in .NET test automation?

Mocking external dependencies in .NET unit tests
Load testing .NET web services and APIs
Generating code coverage reports for .NET unit tests
Implementing BDD with Gherkin syntax in .NET applications (Correct answer)

Correct answer: Implementing BDD with Gherkin syntax in .NET applications

SpecFlow is a BDD framework for .NET that allows writing tests in Gherkin syntax (feature files) bound to C# step definitions, enabling collaboration between teams.

Question 20: Why is test data isolation important across automated functional tests?

It prevents tests from affecting each other's results (Correct answer)
It removes the need for assertions
It increases screen resolution
It makes reports prettier

Correct answer: It prevents tests from affecting each other's results

Isolated data ensures one test's changes do not cause another test to pass or fail unexpectedly.

Question 21: What is the purpose of an API authentication header like Authorization: Bearer <token>?

To specify the response format
To enable CORS
To set the request content type
To provide credentials proving the caller is allowed to access the API resource (Correct answer)

Correct answer: To provide credentials proving the caller is allowed to access the API resource

The Authorization Bearer token header carries a JWT or OAuth access token that the server verifies to authenticate and authorize the request.

Question 22: What does the REST API verb PUT do?

Replaces an entire resource with the provided data (Correct answer)
Retrieves a resource
Partially updates a resource
Creates a new resource

Correct answer: Replaces an entire resource with the provided data

PUT replaces the entire target resource with the request payload, while PATCH makes partial updates.

Question 23: What is test parallelization using Selenium Grid in a CI environment?

Testing multiple versions of an application
Running tests sequentially on a remote server
Distributing test execution across multiple browser/OS nodes simultaneously to reduce run time (Correct answer)
Running the same test twice to verify stability

Correct answer: Distributing test execution across multiple browser/OS nodes simultaneously to reduce run time

Selenium Grid paired with CI distributes tests across multiple nodes in parallel, significantly reducing feedback time in pipelines.

Question 24: In API testing, what is a JSON schema used for?

Validating the structure and data types of an API response (Correct answer)
Storing API credentials
Generating API requests
Documenting API endpoints

Correct answer: Validating the structure and data types of an API response

JSON Schema defines the expected structure, required fields, and data types of a JSON response, enabling automated response validation.

Question 25: What is 'flakiness' in mobile test automation and one common cause?

Tests that are too slow
Tests that always fail
Intermittent test failures caused by timing issues such as animations or slow network responses (Correct answer)
Tests written in the wrong language

Correct answer: Intermittent test failures caused by timing issues such as animations or slow network responses

Flaky mobile tests fail intermittently due to timing issues — like animations completing, network delays, or async operations not finishing before assertions.

Question 26: Which type of locator is generally the most stable choice for identifying a web element in functional automation?

Inline CSS color value
Element position index
A unique ID attribute (Correct answer)
Absolute XPath from the root

Correct answer: A unique ID attribute

A unique ID is the fastest and least brittle locator because it is meant to be unique on the page.

Question 27: What is Explicit Wait in Selenium?

A fixed Thread.sleep pause
Waiting for the entire page to load
A global wait applied to all elements
Waiting for a specific condition on a specific element before proceeding (Correct answer)

Correct answer: Waiting for a specific condition on a specific element before proceeding

Explicit Wait uses WebDriverWait and ExpectedConditions to wait for a specific condition on a targeted element before continuing.

Question 28: Which environment variable approach is recommended for storing sensitive test credentials in CI/CD?

Hard-coding in the test script
Storing in a public repository
Storing in a plain text config file
CI/CD platform secret variables or a secrets manager (Correct answer)

Correct answer: CI/CD platform secret variables or a secrets manager

CI/CD platforms provide secret/masked environment variables that are injected at runtime without exposing credentials in code or logs.

Question 29: In Postman, what is a 'Collection Runner' used for?

Executing an entire collection of API requests sequentially or with test scripts automatically (Correct answer)
Organizing requests into folders
Monitoring API uptime
Generating API documentation

Correct answer: Executing an entire collection of API requests sequentially or with test scripts automatically

The Postman Collection Runner executes all requests in a collection in order, running associated test scripts and reporting results.

Question 30: What does the Apdex score measure in performance testing?

CPU utilization during tests
Number of successful transactions
User satisfaction level based on response times relative to a defined threshold (Correct answer)
Memory consumption

Correct answer: User satisfaction level based on response times relative to a defined threshold

Apdex (Application Performance Index) quantifies user satisfaction on a 0-1 scale based on how response times compare to a satisfaction threshold.

Question 31: Which open-source framework is the industry standard for automating mobile apps on both iOS and Android?

Espresso
Appium (Correct answer)
Detox
XCUITest

Correct answer: Appium

Appium is the most widely used cross-platform mobile automation framework supporting both iOS and Android using the WebDriver protocol.

Question 32: What does BDD stand for in software development methodology?

Binary Decision Diagram
Behavior-Driven Development (Correct answer)
Backend Data Design
Build-Deploy-Debug

Correct answer: Behavior-Driven Development

BDD stands for Behavior-Driven Development, a collaboration methodology encouraging communication between developers, testers, and business stakeholders using shared examples.

Question 33: What is REST in the context of API testing?

A database query language
A programming language
A testing methodology
Representational State Transfer — an architectural style for distributed hypermedia systems (Correct answer)

Correct answer: Representational State Transfer — an architectural style for distributed hypermedia systems

REST (Representational State Transfer) is an architectural style using standard HTTP methods for stateless client-server communication.

Question 34: Which Java library is commonly used for REST API test automation with fluent syntax?

Retrofit
OkHttp
REST Assured (Correct answer)
Apache HttpClient

Correct answer: REST Assured

REST Assured provides a domain-specific language for writing readable, fluent API tests in Java with built-in assertion and validation support.

Question 35: What is the purpose of the 'And' and 'But' keywords in Gherkin syntax?

They mark optional steps that may be conditionally skipped during execution
They define alternative execution paths within a single scenario
They import external feature files and their scenarios into the current file
They extend Given, When, or Then steps to improve readability without repeating the same keyword (Correct answer)

Correct answer: They extend Given, When, or Then steps to improve readability without repeating the same keyword

'And' and 'But' are syntactic conveniences in Gherkin that allow chaining multiple steps without repeating Given, When, or Then, making scenarios more natural and readable.

Question 36: What is the primary purpose of load testing in software quality assurance?

To find security vulnerabilities
To verify the system performs acceptably under expected peak user load (Correct answer)
To validate UI rendering
To test individual functions in isolation

Correct answer: To verify the system performs acceptably under expected peak user load

Load testing simulates the expected maximum concurrent users to verify the system meets performance requirements under realistic conditions.

Question 37: Which selector is generally faster to execute — XPath or CSS Selector?

CSS Selector (Correct answer)
They are identical in performance
XPath
It depends on the browser only

Correct answer: CSS Selector

CSS selectors are generally faster than XPath because browsers natively optimize CSS selector engines, while XPath requires additional processing.

Question 38: Which class in Selenium allows you to perform keyboard and mouse actions like drag-and-drop?

Keys
Robot
Interactions
Actions (Correct answer)

Correct answer: Actions

The Actions class in Selenium WebDriver provides complex user gesture support including drag-and-drop, hover, and key chords.

Question 39: In GitLab CI, what keyword defines the sequence of execution phases in a pipeline?

scripts
phases
jobs
stages (Correct answer)

Correct answer: stages

The `stages` keyword in .gitlab-ci.yml defines the ordered list of pipeline phases; jobs within each stage run in parallel.

Question 40: In TDD, what should a developer do immediately after writing a test that fails (the red phase)?

Refactor the existing codebase first
Add more tests before fixing the current failure
Delete the failing test and rewrite it differently
Write the minimum code necessary to make the test pass (Correct answer)

Correct answer: Write the minimum code necessary to make the test pass

After a test fails, the developer writes only the minimal production code needed to make that specific test pass, moving to the green phase.

ISTQB Certified Tester Advanced Level - Test Automation Engineer (CTAL-TAE)

The ISTQB CTAL-TAE certification validates expertise in designing, implementing, and maintaining test automation solutions, covering automation architecture, API testing, BDD/TDD practices, CI/CD integration, and mobile test automation.

Questions

90 min

Time Limit

65%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds