Risk Management & Mitigation Flashcards

A software release is delayed because an unexpected external dependency introduced a new risk. This is BEST categorized as which type of risk?

Answer: Project risk

Project risks affect schedule, resources, or scope—external dependency delays are a classic project risk category.

Which approach to risk mitigation involves adding automated regression tests to catch potential regressions from future code changes?

Answer: Preventive mitigation

Preventive mitigation reduces the likelihood a risk materializes; automated regression testing proactively guards against regression defects.

When using a risk matrix, a risk rated as 'High Probability / Low Impact' would typically be placed in which quadrant action category?

Answer: Monitor and accept

High-probability, low-impact risks are generally monitored and accepted because their consequence per occurrence is manageable.

Which of the following BEST describes the purpose of a risk-based test strategy?

Answer: To allocate testing effort proportional to the risk level of each area

A risk-based test strategy aligns testing depth and coverage with the risk level of each feature or component to maximize return on test effort.

A tester identifies that a new feature has no existing tests and was developed by a junior engineer. Which TWO factors increase the risk level here?

Answer: Low test coverage and developer experience level

Low test coverage and a less experienced developer both increase defect likelihood, compounding the risk level of the feature.

In risk management, what is a 'trigger' or 'risk indicator'?

Answer: An early warning sign that a risk is about to materialize

A risk trigger (or risk indicator) is a predefined condition or event that signals a risk is imminent, enabling proactive response.

Which of the following is the MAIN difference between a contingency plan and a mitigation plan?

Answer: A mitigation plan reduces likelihood or impact before the risk occurs; a contingency plan defines how to respond if it does occur

Mitigation is proactive (before the risk event), while a contingency plan is reactive (what to do if the risk materializes).