CAST Quality Assurance & Compliance 2 — Questions and Answers
Question 1: Which quality model defines software quality in terms of six main characteristics including functionality, reliability, usability, efficiency, maintainability, and portability?
- ISO/IEC 9126 (Correct answer)
- CMMI Level 3
- IEEE 829
- Six Sigma DMAIC
Correct answer: ISO/IEC 9126
ISO/IEC 9126 defines software quality using those six main characteristics as its top-level quality model.
Question 2: A QA team discovers that a critical defect escaped to production despite passing all test phases. What process should be initiated first?
- Immediately roll back the release
- Conduct a root cause analysis (RCA) (Correct answer)
- Fire the responsible tester
- Add more test cases to regression suite
Correct answer: Conduct a root cause analysis (RCA)
Root cause analysis identifies the underlying reason for the escape so corrective actions can prevent recurrence.
Question 3: In compliance testing, what does 'traceability' primarily ensure?
- All test cases have been executed
- Each requirement is covered by at least one test case (Correct answer)
- Defects are linked to their fixing developer
- Test scripts are version-controlled
Correct answer: Each requirement is covered by at least one test case
Traceability ensures every requirement maps to test cases, proving coverage for compliance audits.
Question 4: Which audit type is performed by an organization on its own processes and products to assess quality?
- Third-party audit
- Regulatory audit
- Internal audit (Correct answer)
- Customer audit
Correct answer: Internal audit
Internal audits are self-assessments conducted by the organization to evaluate its own quality practices.
Question 5: A software product must comply with HIPAA. Which testing activity is MOST critical for compliance?
- Performance load testing
- Security and data privacy testing (Correct answer)
- Usability testing
- Compatibility testing across browsers
Correct answer: Security and data privacy testing
HIPAA mandates protection of health information, making security and data privacy testing the most critical compliance activity.
Question 6: What is the purpose of a Quality Management System (QMS)?
- To automate all testing activities
- To document, implement, and continually improve quality processes (Correct answer)
- To replace manual testing with scripted tests
- To track defects in a centralized database
Correct answer: To document, implement, and continually improve quality processes
A QMS provides the framework for documenting, implementing, monitoring, and improving quality-related processes organization-wide.
Question 7: When a test process is assessed using TMMi (Test Maturity Model integration), which level indicates that testing is defined and documented as a standard process?
- Level 1 – Initial
- Level 2 – Managed
- Level 3 – Defined (Correct answer)
- Level 4 – Measured
Correct answer: Level 3 – Defined
TMMi Level 3 (Defined) means the test process is documented, standardized, and integrated across the organization.
Which quality model defines software quality in terms of six main characteristics including functionality, reliability, usability, efficiency, maintainability, and portability?