Certified Associate in Software Testing (CAST) — Questions and Answers

Question 1: Which testing technique is MOST effective at identifying risks caused by interactions between integrated components?

Regression testing
Acceptance testing
Unit testing
Integration testing (Correct answer)

Correct answer: Integration testing

Integration testing specifically targets interface and interaction defects between components, which are a primary source of integration risk.

Question 2: In a formal review meeting, what is the BEST way for a tester to raise a potential defect in a requirements document?

Interrupt the presenter immediately when the issue is spotted
Note the issue and raise it during the designated discussion period with specific references (Correct answer)
Send a private message to the author rather than raising it in the meeting
Wait until after the meeting and submit it as a production defect

Correct answer: Note the issue and raise it during the designated discussion period with specific references

Raising issues during the designated discussion period with specific references maintains meeting structure while ensuring the concern is formally addressed.

Question 3: Which metric is most useful for tracking the progress of test execution?

Total project budget spent
Number of developers on the team
Percentage of planned test cases executed (Correct answer)
Number of lines of code written

Correct answer: Percentage of planned test cases executed

The percentage of planned test cases executed is a direct measure of test execution progress.

Question 4: Which document describes the conditions that must be met before testing can begin?

Test Execution Schedule
Exit Criteria Document
Entry Criteria Document (Correct answer)
Test Incident Report

Correct answer: Entry Criteria Document

Entry criteria define the prerequisites that must be satisfied before a test phase can start.

Question 5: Which of the following is a WHITE-BOX test design technique?

Equivalence partitioning
Error guessing
Statement coverage (Correct answer)
Use case testing

Correct answer: Statement coverage

Statement coverage is a white-box technique that uses knowledge of the internal code structure to ensure every executable statement is executed at least once.

Question 6: Which statement BEST distinguishes black-box testing from white-box testing?

Black-box testing always achieves higher code coverage than white-box testing
Black-box testing derives tests from the specification without knowledge of internal implementation (Correct answer)
White-box testing uses only manual techniques
Black-box testing can only be performed by developers

Correct answer: Black-box testing derives tests from the specification without knowledge of internal implementation

Black-box testing focuses on inputs and expected outputs based on specifications or requirements, requiring no knowledge of the internal code structure, unlike white-box techniques.

Question 7: What information is typically NOT included in a defect report?

Severity and priority
Actual vs. expected results
Steps to reproduce
Tester's salary information (Correct answer)

Correct answer: Tester's salary information

Defect reports contain technical and process information about the defect, not personal HR data like salary.

Question 8: When documenting test results, testers should use:

Vague language to allow flexibility in interpretation
Precise, objective language with specific data (Correct answer)
Marketing language to highlight positives
Technical jargon only developers can understand

Correct answer: Precise, objective language with specific data

Test documentation must be precise and objective to ensure results are clear and actionable for all stakeholders.

Question 9: A tester needs to communicate a testing delay to a project manager. Which approach is BEST?

Wait until the delay is certain before communicating
Send a brief message blaming the development team for the delay
Report the risk proactively as soon as it is identified, along with a mitigation plan (Correct answer)
Avoid mentioning the delay and work overtime to recover

Correct answer: Report the risk proactively as soon as it is identified, along with a mitigation plan

Proactive risk communication with a mitigation plan gives the project manager time to respond and demonstrates professional accountability.

Question 10: When a tester signs a test completion report, they are professionally affirming that:

The software is ready for production release
The software has no defects
The testing activities described were conducted as stated and results are accurately represented (Correct answer)
All identified defects have been resolved

Correct answer: The testing activities described were conducted as stated and results are accurately represented

Signing a test completion report is a professional attestation that the described testing activities were performed and that the reported results accurately reflect what was observed.

Question 11: When using boundary value analysis, the THREE-POINT approach tests:

The minimum, midpoint, and maximum of each partition
Only the first and last valid values
The boundary value, one below it, and one above it (Correct answer)
Only values inside the valid partition

Correct answer: The boundary value, one below it, and one above it

The three-point BVA approach tests the exact boundary value plus the values immediately below and above it, targeting off-by-one and boundary-condition defects.

Question 12: What is the primary objective of risk management & mitigation within the CAST professional framework?

Making assumptions based on previous experience alone
Copying approaches used by competitors without adaptation
Analyzing data systematically using validated assessment tools (Correct answer)
Relying on informal observations and anecdotal reports

Correct answer: Analyzing data systematically using validated assessment tools

Analyzing data systematically using validated assessment tools is the correct approach because effective risk management & mitigation in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 13: What is the role of a 'control chart' in statistical quality control for software testing?

To track team member attendance
To monitor process variation and detect when a process is out of control (Correct answer)
To map requirements to test cases
To schedule test cases by priority

Correct answer: To monitor process variation and detect when a process is out of control

Control charts plot process metrics over time, with control limits to signal when variation exceeds acceptable bounds.

Question 14: What is the primary purpose of software testing tools?

To delay testing processes
To increase software complexity
To automate and improve testing efficiency (Correct answer)
To replace manual testers

Correct answer: To automate and improve testing efficiency

Software testing tools help automate and streamline the testing process, improving efficiency, accuracy, and defect detection.

Question 15: In a CMMI Level 4 organization, test performance is managed using quantitative data. Which practice BEST exemplifies this?

Documenting test procedures in a shared wiki
Setting statistical process control limits on defect injection rates (Correct answer)
Holding daily standups to discuss testing progress
Using test case counts to plan sprints

Correct answer: Setting statistical process control limits on defect injection rates

CMMI Level 4 (Quantitatively Managed) requires using statistical techniques to control process performance, such as SPC limits on defect rates.

Question 16: During a risk management & mitigation audit, which documentation is most critical to have readily available?

Conducting root cause analysis to identify underlying systemic issues (Correct answer)
Addressing symptoms without investigating deeper causes
Blaming individual team members for process failures
Accepting recurring problems as unavoidable

Correct answer: Conducting root cause analysis to identify underlying systemic issues

Conducting root cause analysis to identify underlying systemic issues is the correct approach because effective risk management & mitigation in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 17: Which of the following BEST describes the 'error guessing' test design technique?

A structured approach derived from system specifications
A formal method using mathematical proofs to identify defects
An experience-based technique where testers use knowledge of typical errors to design tests (Correct answer)
A technique that automates random input generation

Correct answer: An experience-based technique where testers use knowledge of typical errors to design tests

Error guessing relies on the tester's experience and intuition about where defects are likely to occur, targeting historically problematic areas without a formal process.

Question 18: What is the recommended frequency for reviewing and updating defect management protocols?

Reviewing results only at year-end
Monitoring outcomes through regular data collection and trend analysis (Correct answer)
Relying on periodic external audits as the sole evaluation method
Tracking activity volume without measuring quality

Correct answer: Monitoring outcomes through regular data collection and trend analysis

Monitoring outcomes through regular data collection and trend analysis is the correct approach because effective defect management in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 19: Which of the following best describes 'environment parity' in software testing?

Using the same test cases across all environments
Having identical defect counts in each environment
Having equal numbers of testers in each environment
Ensuring test and production environments are as similar as possible to maximize test validity (Correct answer)

Correct answer: Ensuring test and production environments are as similar as possible to maximize test validity

Environment parity minimizes differences between test and production environments so that test results accurately predict production behavior.

Question 20: When a tester uses open-source tools in a commercial testing project, what ethical and legal obligation do they have?

Pay a standard fee regardless of the license terms
Report tool usage to the open-source community
No obligation, since open-source tools are free to use in any context
Verify and comply with the license terms of the open-source tool (Correct answer)

Correct answer: Verify and comply with the license terms of the open-source tool

Open-source software is licensed under specific terms that may restrict commercial use, and professional ethics require testers to understand and comply with applicable license obligations.

Question 21: Which of the following is a component typically included in a test environment?

Customer billing systems
Marketing campaign tools
Hardware, software, network configuration, and test data (Correct answer)
Project management timelines

Correct answer: Hardware, software, network configuration, and test data

A test environment comprises hardware, software, operating systems, network settings, and test data needed to execute tests.

Question 22: What is the MAIN advantage of involving stakeholders early in the test planning process?

It reduces the number of defects the testers must find
It eliminates the need for a formal test plan document
It allows testers to start executing tests sooner
It ensures testing scope and priorities align with business needs and stakeholder expectations (Correct answer)

Correct answer: It ensures testing scope and priorities align with business needs and stakeholder expectations

Early stakeholder involvement aligns testing scope and priorities with business objectives, reducing misdirected effort and late-stage surprises.

Question 23: Which type of testing tool is used for functional testing?

Wireshark
Postman
JIRA
Selenium (Correct answer)

Correct answer: Selenium

Selenium is a widely used automation tool for functional testing, allowing testers to validate user interface behavior across different browsers.

Question 24: A tester finds that a field accepts alphabetic characters when only numeric input should be allowed. Which black-box technique BEST helps design a test case to detect this flaw?

Cyclomatic complexity analysis
Statement coverage testing
Decision table with only valid conditions
Equivalence partitioning with an invalid partition for non-numeric input (Correct answer)

Correct answer: Equivalence partitioning with an invalid partition for non-numeric input

Equivalence partitioning identifies an invalid partition (non-numeric characters) and a single test case from that partition would reveal that the input validation is missing.

Question 25: Which test design technique divides input data into groups where all values in a group are expected to be processed the same way?

Boundary value analysis
State transition testing
Decision table testing
Equivalence partitioning (Correct answer)

Correct answer: Equivalence partitioning

Equivalence partitioning divides inputs into classes (partitions) where every value in a class is expected to behave identically, reducing the number of test cases needed.

Question 26: Which tool or methodology is most appropriate for analyzing defect management outcomes?

Maintaining professional boundaries while building collaborative relationships (Correct answer)
Maintaining strict formality that inhibits collaboration
Prioritizing relationships over professional standards
Adjusting boundaries based on individual situations without guidelines

Correct answer: Maintaining professional boundaries while building collaborative relationships

Maintaining professional boundaries while building collaborative relationships is the correct approach because effective defect management in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 27: Which defect status indicates that a defect has been fixed and is ready for retesting?

Rejected
Fixed (Correct answer)
New
Deferred

Correct answer: Fixed

The 'Fixed' status indicates that the defect has been addressed by developers and is ready to be verified through retesting.

Question 28: A stakeholder questions the value of communication & stakeholder engagement initiatives. Which response best demonstrates ROI?

Building a culture of accountability with transparent reporting (Correct answer)
Avoiding accountability discussions to prevent conflict
Distributing accountability so widely that no one is responsible
Centralizing accountability with a single individual

Correct answer: Building a culture of accountability with transparent reporting

Building a culture of accountability with transparent reporting is the correct approach because effective communication & stakeholder engagement in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 29: Which metric is MOST useful for tracking residual risk after mitigation actions have been applied?

Total lines of code changed
Defect density before testing
Number of test cases executed
Risk exposure post-mitigation (Correct answer)

Correct answer: Risk exposure post-mitigation

Risk exposure post-mitigation measures the remaining risk level after controls are applied, directly tracking residual risk.

Question 30: What is the purpose of a Quality Management System (QMS)?

To track defects in a centralized database
To document, implement, and continually improve quality processes (Correct answer)
To automate all testing activities
To replace manual testing with scripted tests

Correct answer: To document, implement, and continually improve quality processes

A QMS provides the framework for documenting, implementing, monitoring, and improving quality-related processes organization-wide.

Question 31: During test closure in a compliance-driven project, which activity is mandatory before signing off?

Reassigning testers to development tasks
Deleting obsolete test cases
Converting manual tests to automated scripts
Archiving all test artifacts and obtaining stakeholder sign-off (Correct answer)

Correct answer: Archiving all test artifacts and obtaining stakeholder sign-off

Compliance requires that all test artifacts are archived and stakeholders formally approve closure to create an auditable record.

Question 32: An organization follows ISO 9001 for quality management. What is the MAIN benefit this certification provides to customers?

Ensures software is compliant with government regulations
Confirms the organization has a documented quality management system (Correct answer)
Guarantees zero defects in software
Provides a warranty for delivered products

Correct answer: Confirms the organization has a documented quality management system

ISO 9001 certification confirms that an organization maintains a documented QMS that meets international quality management standards.

Question 33: A test basis refers to:

The testing team's organizational hierarchy
The initial defect count before testing
The documents and information used to derive test cases (Correct answer)
The baseline performance benchmark

Correct answer: The documents and information used to derive test cases

The test basis is the body of knowledge (requirements, specs, designs) from which test cases are derived.

Question 34: What is the key benefit of early testing?

Increase the number of test cases
Identify defects early to minimize costs (Correct answer)
Eliminate the need for user acceptance testing
Reduce testing time

Correct answer: Identify defects early to minimize costs

Early testing helps identify defects in the initial stages of development, reducing the cost and effort required to fix them later.

Question 35: What is the main objective of software testing?

Eliminate the need for debugging
Ensure 100% defect-free software
Increase the complexity of the software
Identify defects and verify requirements (Correct answer)

Correct answer: Identify defects and verify requirements

The primary goal of software testing is to identify defects and ensure that the software meets the specified requirements and performs as expected.

Question 36: Exit criteria in a test plan define:

When testing is considered complete enough to proceed to the next phase (Correct answer)
The hardware requirements for the test environment
The names of testers assigned to each module
The version control branching strategy

Correct answer: When testing is considered complete enough to proceed to the next phase

Exit criteria specify the conditions that must be satisfied before a test phase can be concluded.

Question 37: A Corrective Action and Preventive Action (CAPA) process is triggered after a major escape defect. What distinguishes the 'preventive' action from the 'corrective' action?

Corrective actions fix the current defect; preventive actions address potential future issues (Correct answer)
Preventive actions are regulatory; corrective actions are optional
Both actions are identical in scope
Preventive actions fix the current defect; corrective actions address future risks

Correct answer: Corrective actions fix the current defect; preventive actions address potential future issues

Corrective action addresses the current non-conformance, while preventive action targets potential future non-conformances.

Question 38: A tester is asked to verify that data entered in one country's version of an application complies with GDPR. What type of testing is this PRIMARILY?

Compatibility testing
Boundary value testing
Localization testing
Regulatory compliance testing (Correct answer)

Correct answer: Regulatory compliance testing

Verifying adherence to GDPR data protection requirements is regulatory compliance testing.

Question 39: Which section of a test plan typically defines what will NOT be tested?

Test Objectives
Scope and Exclusions (Correct answer)
Entry Criteria
Test Deliverables

Correct answer: Scope and Exclusions

The Scope and Exclusions section explicitly states features or areas outside the testing effort.

Question 40: Which testing concept states that most defects are found in a few modules?

Exhaustive testing
Equivalence partitioning
Defect clustering (Correct answer)
Shift-left testing

Correct answer: Defect clustering

The 'Defect Clustering' principle suggests that most defects tend to be concentrated in a small number of software modules.

Question 41: In a state transition diagram, what does a 'transition' represent?

A test case that verifies system behavior
A movement from one state to another triggered by an event or condition (Correct answer)
An invalid sequence of inputs
A stable condition in which the system remains

Correct answer: A movement from one state to another triggered by an event or condition

A transition represents the change from one state to another, triggered by a specific event, sometimes with a guard condition or resulting action.

Question 42: After a major production incident, the team conducts a 'lessons learned' session to update the risk register. This activity BEST supports which risk management process?

Risk acceptance acknowledgment
Risk transfer documentation
Risk identification for future projects (Correct answer)
Risk avoidance planning

Correct answer: Risk identification for future projects

Post-incident lessons learned feed historical risk data back into future risk identification, improving the team's risk awareness and register accuracy.

Question 43: Which of the following scenarios represents an ethical violation of the tester's duty to the public?

Recommending additional testing cycles that increase project cost
Reporting a defect that will delay the product launch
Knowingly approving a safety-critical system that has unresolved high-severity defects (Correct answer)
Disagreeing with the development team's risk assessment

Correct answer: Knowingly approving a safety-critical system that has unresolved high-severity defects

Approving a safety-critical system with known unresolved high-severity defects puts the public at risk and is a serious violation of a tester's professional and ethical duty.

Question 44: Which of the following is a key output of the test closure phase?

Test Plan
Test Summary Report (Correct answer)
Requirements Document
Test Case Specification

Correct answer: Test Summary Report

The Test Summary Report is the primary deliverable produced at the end of the test closure phase.

Question 45: A traceability matrix in testing is used to:

Track defect resolution timelines
Record tester login and logout times
Map test cases to requirements to ensure full coverage (Correct answer)
List all software modules under test

Correct answer: Map test cases to requirements to ensure full coverage

A Requirements Traceability Matrix (RTM) links requirements to test cases to verify that all requirements are tested.

Question 46: A new regulation impacts defect management procedures. What should a CAST professional do first?

Delegating compliance oversight to administrative staff
Complying only with regulations that have enforcement mechanisms
Interpreting regulations loosely to allow maximum flexibility
Ensuring compliance with current regulatory requirements and standards (Correct answer)

Correct answer: Ensuring compliance with current regulatory requirements and standards

Ensuring compliance with current regulatory requirements and standards is the correct approach because effective defect management in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 47: In the context of associate in software testing, which principle most directly governs test planning and execution practices?

Using trial-and-error without systematic documentation
Relying exclusively on vendor-provided solutions
Applying evidence-based methodologies with peer-reviewed support (Correct answer)
Following popular trends without evaluating their applicability

Correct answer: Applying evidence-based methodologies with peer-reviewed support

Applying evidence-based methodologies with peer-reviewed support is the correct approach because effective test planning and execution in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 48: A new regulation impacts test planning and execution procedures. What should a CAST professional do first?

Delegating compliance oversight to administrative staff
Interpreting regulations loosely to allow maximum flexibility
Ensuring compliance with current regulatory requirements and standards (Correct answer)
Complying only with regulations that have enforcement mechanisms

Correct answer: Ensuring compliance with current regulatory requirements and standards

Ensuring compliance with current regulatory requirements and standards is the correct approach because effective test planning and execution in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 49: A stakeholder questions the value of professional ethics & standards initiatives. Which response best demonstrates ROI?

Distributing accountability so widely that no one is responsible
Centralizing accountability with a single individual
Building a culture of accountability with transparent reporting (Correct answer)
Avoiding accountability discussions to prevent conflict

Correct answer: Building a culture of accountability with transparent reporting

Building a culture of accountability with transparent reporting is the correct approach because effective professional ethics & standards in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 50: Which scenario would require a associate in software testing professional to escalate a tools and techniques concern?

Using feedback solely for personnel evaluations
Collecting feedback only during formal review periods
Discouraging critical feedback to maintain team morale
Creating feedback mechanisms that encourage continuous improvement (Correct answer)

Correct answer: Creating feedback mechanisms that encourage continuous improvement

Creating feedback mechanisms that encourage continuous improvement is the correct approach because effective tools and techniques in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 51: In the context of risk management, what does 'risk transference' mean in software projects?

Moving a risk to a later sprint for reassessment
Converting a product risk into a project risk
Assigning a risk to a different tester
Shifting the financial or operational consequence to a third party such as a vendor or insurer (Correct answer)

Correct answer: Shifting the financial or operational consequence to a third party such as a vendor or insurer

Risk transference shifts the financial or operational burden of a risk to another party, such as through outsourcing or insurance.

Question 52: Which of the following BEST describes active listening during a requirements review meeting?

Nodding to show agreement with all stakeholder statements
Waiting politely for your turn to speak without processing input
Paraphrasing what stakeholders say and asking clarifying questions (Correct answer)
Taking verbatim notes without asking any questions

Correct answer: Paraphrasing what stakeholders say and asking clarifying questions

Active listening involves paraphrasing and asking clarifying questions to confirm understanding and uncover ambiguities.

Question 53: What is the recommended frequency for reviewing and updating tools and techniques protocols?

Tracking activity volume without measuring quality
Reviewing results only at year-end
Relying on periodic external audits as the sole evaluation method
Monitoring outcomes through regular data collection and trend analysis (Correct answer)

Correct answer: Monitoring outcomes through regular data collection and trend analysis

Monitoring outcomes through regular data collection and trend analysis is the correct approach because effective tools and techniques in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 54: What is the primary purpose of a Test Summary Report in software testing?

To list all test cases to be executed
To outline the defect tracking process
To define the test environment configuration
To summarize testing activities, results, and findings for stakeholders (Correct answer)

Correct answer: To summarize testing activities, results, and findings for stakeholders

A Test Summary Report communicates the overall testing outcome, coverage, and quality status to stakeholders.

Question 55: Why is defect prioritization important in software testing?

To avoid fixing minor defects
To reduce the number of test cases
To focus on fixing the most critical issues first (Correct answer)
To delay software testing

Correct answer: To focus on fixing the most critical issues first

Defect prioritization ensures that high-impact issues are addressed first, improving software stability and user experience.

Question 56: In the context of associate in software testing, which principle most directly governs defect management practices?

Applying evidence-based methodologies with peer-reviewed support (Correct answer)
Using trial-and-error without systematic documentation
Following popular trends without evaluating their applicability
Relying exclusively on vendor-provided solutions

Correct answer: Applying evidence-based methodologies with peer-reviewed support

Applying evidence-based methodologies with peer-reviewed support is the correct approach because effective defect management in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 57: A software release is delayed because an unexpected external dependency introduced a new risk. This is BEST categorized as which type of risk?

Technical risk
Product risk
Project risk (Correct answer)
Compliance risk

Correct answer: Project risk

Project risks affect schedule, resources, or scope—external dependency delays are a classic project risk category.

Question 58: When a tester must communicate negative test results—such as a high defect rate—what tone is MOST appropriate?

Minimizing, to avoid discouraging the development team
Alarming, to create urgency and motivate the team
Objective and factual, framing findings as risk information to support decision-making (Correct answer)
Apologetic, to take responsibility for the quality issues

Correct answer: Objective and factual, framing findings as risk information to support decision-making

An objective, factual tone positions test results as actionable quality information rather than a judgment, which is more effective for decision-making.

Question 59: What is the most common mistake professionals make when implementing defect management strategies?

Responding to problems only after they occur
Transferring all risk to external partners through contracts
Creating contingency plans for every possible scenario regardless of probability
Developing contingency plans for high-probability risk scenarios (Correct answer)

Correct answer: Developing contingency plans for high-probability risk scenarios

Developing contingency plans for high-probability risk scenarios is the correct approach because effective defect management in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 60: Which IEEE standard is most commonly referenced for test documentation in software testing?

IEEE 829 (Correct answer)
IEEE 802
IEEE 754
IEEE 1003

Correct answer: IEEE 829

IEEE 829 defines the standard format for software test documentation including test plans and reports.

Question 61: State transition testing is MOST appropriate when:

The system reacts differently depending on its current state and input events (Correct answer)
Code coverage metrics need to be maximized
The number of inputs is small enough to test exhaustively
The system behavior depends only on current inputs

Correct answer: The system reacts differently depending on its current state and input events

State transition testing is used when a system's response depends on both the current state and the triggering event, making it ideal for systems modeled as finite state machines.

Question 62: What should a tester do when actual test results differ from expected results?

Document the deviation and log a defect (Correct answer)
Skip the test and continue
Re-run the test until it passes
Mark the test as blocked

Correct answer: Document the deviation and log a defect

Discrepancies between actual and expected results must be documented and raised as defects per standard testing practice.

Question 63: A tester discovers a critical security vulnerability but is told by management to delay reporting it to meet the release deadline. What is the ethically correct action?

Anonymously leak the vulnerability to the press
Ignore the vulnerability and proceed with testing other areas
Comply with management and delay the report
Immediately escalate the issue through appropriate channels regardless of the deadline (Correct answer)

Correct answer: Immediately escalate the issue through appropriate channels regardless of the deadline

Professional ethics require testers to report critical issues promptly through proper channels, as delaying a security vulnerability report puts users at risk.

Question 64: According to professional ethics standards, how should a tester handle confidential information about defects discovered in a client's system?

Keep it confidential and share it only with authorized parties on a need-to-know basis (Correct answer)
Discuss it publicly only after the product is released
Share it openly with colleagues at other companies to get advice
Publish it in professional forums to advance the field of testing

Correct answer: Keep it confidential and share it only with authorized parties on a need-to-know basis

Professional ethics require testers to keep client and project information confidential, sharing it only with those who are authorized and have a legitimate need to know.

Question 65: A project manager asks the test team to stop testing a low-risk module to focus on a high-risk integration. This is an example of which risk response strategy?

Risk avoidance
Risk acceptance through reallocation
Risk transfer
Risk mitigation through prioritization (Correct answer)

Correct answer: Risk mitigation through prioritization

Reallocating testing resources from low-risk to high-risk areas is a mitigation strategy that reduces overall project risk exposure.

Question 66: What is the most common mistake professionals make when implementing tools and techniques strategies?

Developing contingency plans for high-probability risk scenarios (Correct answer)
Creating contingency plans for every possible scenario regardless of probability
Responding to problems only after they occur
Transferring all risk to external partners through contracts

Correct answer: Developing contingency plans for high-probability risk scenarios

Developing contingency plans for high-probability risk scenarios is the correct approach because effective tools and techniques in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 67: An organization wants to ensure its software development lifecycle complies with ASPICE (Automotive SPICE). Which ASPICE process area is directly relevant to system testing?

MAN.3 – Project Management
SUP.1 – Quality Assurance
SYS.4 – System Integration Testing (Correct answer)
SWE.1 – Software Requirements Analysis

Correct answer: SYS.4 – System Integration Testing

ASPICE SYS.4 covers System Integration Testing, directly applicable to verifying integrated system components meet requirements.

Question 68: A software team uses a risk register to track identified risks. What information should a risk register entry typically contain?

Only the risk description and owner
Only the mitigation plan and test cases
Risk ID, description, probability, impact, mitigation plan, and owner (Correct answer)
Risk ID and the date it was identified

Correct answer: Risk ID, description, probability, impact, mitigation plan, and owner

A complete risk register entry includes identification, assessment (probability and impact), mitigation strategy, and accountability (owner).

Question 69: During user acceptance testing (UAT), a business user reports an issue that is actually a training problem, not a defect. How should the tester respond?

Tell the user they are wrong and close the issue
Acknowledge the concern, explain the correct behavior, and recommend a training solution (Correct answer)
Log it as a defect to avoid dismissing the user
Escalate to the development team to investigate

Correct answer: Acknowledge the concern, explain the correct behavior, and recommend a training solution

Acknowledging the concern and directing the user to training resources resolves the immediate issue while preserving the stakeholder relationship.

Question 70: A Test Incident Report is created when:

A requirement is approved by the customer
An unexpected event occurs during test execution that needs investigation (Correct answer)
A test environment is set up successfully
A test case is added to the test suite

Correct answer: An unexpected event occurs during test execution that needs investigation

Test Incident Reports capture unexpected occurrences during testing that require further investigation or resolution.

Question 71: Which test documentation artifact maps software requirements to their verification methods?

Incident Report
Test Execution Schedule
Requirements Traceability Matrix (Correct answer)
Test Log

Correct answer: Requirements Traceability Matrix

The Requirements Traceability Matrix (RTM) links each requirement to its corresponding test cases and verification methods.

Question 72: What does a test progress report typically communicate to project management?

The source code review findings
Current testing status, risks, and any deviations from the test plan (Correct answer)
The architectural design of the software
A list of approved requirements

Correct answer: Current testing status, risks, and any deviations from the test plan

Test progress reports keep management informed of testing status, blockers, and any plan deviations.

Question 73: Which behavior BEST demonstrates effective stakeholder management by a test lead during a high-pressure release?

Shielding stakeholders from all bad news to prevent panic
Providing regular, honest status updates and flagging risks with proposed mitigations (Correct answer)
Escalating every minor issue to senior management
Reducing the test scope without informing stakeholders to meet the deadline

Correct answer: Providing regular, honest status updates and flagging risks with proposed mitigations

Regular honest updates with proposed mitigations keep stakeholders informed and empowered to make timely decisions during high-pressure releases.

Question 74: A QA team implements 'process audits' at regular intervals during a project. What is the PRIMARY goal of these audits?

To approve or reject test cases
To verify that defined processes are being followed correctly (Correct answer)
To estimate the remaining test effort
To measure developer productivity

Correct answer: To verify that defined processes are being followed correctly

Process audits verify adherence to defined procedures, identifying deviations that could compromise quality.

Question 75: What is the primary purpose of a test plan in software testing?

To avoid documentation
To eliminate the need for defect tracking
To replace software requirements
To define testing strategy and scope (Correct answer)

Correct answer: To define testing strategy and scope

A test plan serves as a document that outlines the testing strategy, objectives, scope, schedule, and resources needed for testing.

Question 76: When a tester disagrees with a stakeholder's decision to release despite open critical defects, what is the MOST professional response?

Refuse to sign off on the release
Document the risks formally in writing, communicate them clearly, and respect the business decision after doing so (Correct answer)
Tell other team members that the release decision is wrong
Silently accept the decision without documenting concerns

Correct answer: Document the risks formally in writing, communicate them clearly, and respect the business decision after doing so

Formally documenting risks ensures accountability while respecting stakeholder authority to make final release decisions.

Question 77: A decision table test design technique is MOST useful when:

Test coverage of individual code branches is required
Input values form a continuous numeric range
The system transitions between multiple states
Multiple conditions combine to produce different actions (Correct answer)

Correct answer: Multiple conditions combine to produce different actions

Decision tables are best suited when the outcome depends on combinations of multiple conditions, systematically capturing all condition/action combinations.

Question 78: In test reporting, what does 'test coverage' measure?

The speed at which tests are executed
The proportion of the test basis exercised by test cases (Correct answer)
The total number of defects found
The number of testers assigned to a project

Correct answer: The proportion of the test basis exercised by test cases

Test coverage measures how much of the test basis (requirements, code, etc.) has been exercised by the test suite.

Question 79: What is the significance of using a 'clean' test environment for each test run?

It speeds up test case design
It reduces the cost of hardware
It eliminates residual state from previous tests, ensuring results are independent and reliable (Correct answer)
It reduces the need for test documentation

Correct answer: It eliminates residual state from previous tests, ensuring results are independent and reliable

A clean environment removes residual data or state from prior runs, preventing test pollution and ensuring each run yields independent results.

Question 80: In compliance testing, what does 'traceability' primarily ensure?

Defects are linked to their fixing developer
Each requirement is covered by at least one test case (Correct answer)
Test scripts are version-controlled
All test cases have been executed

Correct answer: Each requirement is covered by at least one test case

Traceability ensures every requirement maps to test cases, proving coverage for compliance audits.

Question 81: Why is it important to use production-like data in a test environment?

To ensure tests reflect real-world scenarios and uncover realistic defects (Correct answer)
To simplify test case design
To make tests run faster
To reduce storage costs

Correct answer: To ensure tests reflect real-world scenarios and uncover realistic defects

Production-like data reveals defects that only appear with realistic data volumes and distributions, improving test validity.

Question 82: Which document is used to track and manage software defects?

Test Plan
Deployment Checklist
Defect Report (Correct answer)
User Manual

Correct answer: Defect Report

A defect report documents defect details, including severity, priority, steps to reproduce, and current status for effective tracking and resolution.

Question 83: What is the primary advantage of using automated testing tools?

Eliminates the need for testing
Only applies to performance testing
Slows down the testing process
Increases efficiency and reduces human error (Correct answer)

Correct answer: Increases efficiency and reduces human error

Automated testing tools improve efficiency by running test cases quickly and consistently, reducing human errors in repetitive tasks.

Question 84: Which test design technique is SPECIFICALLY designed to handle situations where the same input can produce different outputs depending on previous inputs?

Boundary value analysis
Decision table testing
State transition testing (Correct answer)
Equivalence partitioning

Correct answer: State transition testing

State transition testing handles systems where history (current state) determines how a given input is processed, unlike stateless techniques like equivalence partitioning or BVA.

Question 85: What is the purpose of a defect lifecycle in software testing?

To increase software complexity
To eliminate the need for defect tracking
To ensure defects are properly tracked and resolved (Correct answer)
To prevent software releases

Correct answer: To ensure defects are properly tracked and resolved

The defect lifecycle defines the stages a defect goes through from discovery to resolution, ensuring proper tracking and closure.

Question 86: The concept of 'independence in testing' is important primarily because:

Independence is required by all international testing standards
Independent testers are less likely to have cognitive biases that prevent finding defects in code they wrote (Correct answer)
Independent testers work faster than developers testing their own code
Independent testing always finds more defects than developer testing

Correct answer: Independent testers are less likely to have cognitive biases that prevent finding defects in code they wrote

Independent testers are free from the psychological bias of not wanting to find flaws in work they created, making them more objective and effective at defect detection.

Question 87: Which quality model defines software quality in terms of six main characteristics including functionality, reliability, usability, efficiency, maintainability, and portability?

CMMI Level 3
IEEE 829
Six Sigma DMAIC
ISO/IEC 9126 (Correct answer)

Correct answer: ISO/IEC 9126

ISO/IEC 9126 defines software quality using those six main characteristics as its top-level quality model.

Question 88: What is 'test oracle bias' and why is it an ethical concern?

When a tester unconsciously assumes the expected output matches the actual output without proper verification (Correct answer)
Using production data without anonymization
Using automated tools instead of manual testing
Spending too much time on high-priority test cases

Correct answer: When a tester unconsciously assumes the expected output matches the actual output without proper verification

Test oracle bias occurs when testers unconsciously accept incorrect outputs as correct, and it is an ethical concern because it can lead to undetected defects reaching users.

Question 89: Which document provides a detailed log of all test activities and results during a test execution cycle?

Test Case Specification
Test Plan
Test Log (Correct answer)
Test Summary Report

Correct answer: Test Log

A test log records chronological details of test execution activities and results.

Question 90: A developer dismisses a tester's defect report saying it is 'by design.' What is the tester's BEST next step?

Escalate to senior management right away
Cross-reference the behavior against the requirements specification and raise with the product owner if discrepant (Correct answer)
Accept the developer's explanation and close the defect
Reopen the defect immediately without further investigation

Correct answer: Cross-reference the behavior against the requirements specification and raise with the product owner if discrepant

Cross-referencing requirements provides an objective basis for the dispute and involves the product owner who has authority over what is 'by design.'

Question 91: Which document BEST serves as the primary communication vehicle between the test team and project stakeholders throughout the project lifecycle?

The test case specifications
The test plan (Correct answer)
The requirements traceability matrix
The defect log

Correct answer: The test plan

The test plan establishes scope, approach, resources, and schedule and serves as the primary reference document for stakeholder communication throughout testing.

Question 92: Which of the following is the MAIN difference between a contingency plan and a mitigation plan?

A mitigation plan is used after the risk occurs; a contingency plan prevents it
A mitigation plan reduces likelihood or impact before the risk occurs; a contingency plan defines how to respond if it does occur (Correct answer)
They are interchangeable terms in risk management
A contingency plan is only used for project risks, not product risks

Correct answer: A mitigation plan reduces likelihood or impact before the risk occurs; a contingency plan defines how to respond if it does occur

Mitigation is proactive (before the risk event), while a contingency plan is reactive (what to do if the risk materializes).

Question 93: What is the primary objective of defect management in software testing?

To delay software releases
To eliminate all software defects completely
To remove all test cases after execution
To identify, track, and resolve defects efficiently (Correct answer)

Correct answer: To identify, track, and resolve defects efficiently

Defect management ensures defects are identified, tracked, and resolved efficiently to improve software quality and reliability.

Question 94: What is the main difference between a test case and a test script?

A test case is automated while a test script is manual
A test script is written by developers; a test case is written by testers
There is no difference between the two
A test case defines what to test; a test script provides step-by-step instructions for execution (Correct answer)

Correct answer: A test case defines what to test; a test script provides step-by-step instructions for execution

Test cases define inputs and expected outputs, while test scripts provide detailed procedural steps for execution.

Question 95: A stakeholder insists a known defect is 'not a real bug' and should be closed. What should the tester do?

Escalate to senior management without talking to the stakeholder
Mark it as deferred without discussion
Provide objective evidence such as requirements and reproduction steps to support the defect (Correct answer)
Close the defect immediately to maintain the relationship

Correct answer: Provide objective evidence such as requirements and reproduction steps to support the defect

Providing objective evidence like requirements documentation and reproduction steps maintains professionalism and grounds the discussion in facts.

Question 96: In continuous integration (CI) pipelines, test environments are typically:

Automatically spun up and torn down as part of the pipeline (Correct answer)
Shared with production to reduce costs
Manually provisioned by testers before each release
Updated only once per quarter

Correct answer: Automatically spun up and torn down as part of the pipeline

CI pipelines automate environment provisioning and teardown to ensure each build is tested in a clean, consistent state.

Question 97: Which scenario would require a associate in software testing professional to escalate a defect management concern?

Discouraging critical feedback to maintain team morale
Creating feedback mechanisms that encourage continuous improvement (Correct answer)
Collecting feedback only during formal review periods
Using feedback solely for personnel evaluations

Correct answer: Creating feedback mechanisms that encourage continuous improvement

Creating feedback mechanisms that encourage continuous improvement is the correct approach because effective defect management in the associate in software testing field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 98: A remote testing team spans three time zones. Which communication strategy BEST supports effective collaboration?

Require all meetings to occur in the team leader's time zone
Have remote team members work the same hours as headquarters
Establish overlapping core hours, use asynchronous tools, and rotate meeting times fairly (Correct answer)
Rely entirely on email and avoid real-time meetings

Correct answer: Establish overlapping core hours, use asynchronous tools, and rotate meeting times fairly

Overlapping core hours combined with asynchronous tools and fair meeting rotation accommodate all team members and support distributed collaboration.

Question 99: Which defect severity level describes an issue that completely blocks system functionality?

Critical (Correct answer)
Cosmetic
Low
Medium

Correct answer: Critical

A critical defect causes complete system failure or prevents further testing, requiring immediate attention.

Question 100: When preparing a test summary report for stakeholders, which element is MOST important to include?

An assessment of product quality and release risk (Correct answer)
A list of every test case executed with pass/fail status
Detailed technical descriptions of all defects found
The personal performance ratings of each tester

Correct answer: An assessment of product quality and release risk

Stakeholders need an assessment of product quality and release risk to make informed go/no-go decisions, not exhaustive technical details.

Certified Associate in Software Testing (CAST)

The CAST certification validates foundation-level knowledge of software testing principles and practices, covering the Software Testing Body of Knowledge (STBOK) including test design, management, defect tracking, and quality assurance.

100

Questions

180 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

badges.peoplecert.org — Eligibility, passing score, time limit · verified Oct 2026
peoplecert.org — Exam information · verified Oct 2026