CAST Risk Management & Mitigation 2

Question 1

A project team discovers a critical defect two days before release. The defect affects only 2% of users in a non-critical workflow. Which risk response is MOST appropriate?

Accepted Answer

Accept the risk and release with a known issues note

Answer

Cancel the release immediately

Answer

Transfer the risk to the QA manager

Answer

Avoid the risk by removing the workflow entirely

Question 2

Which metric is MOST useful for tracking residual risk after mitigation actions have been applied?

Accepted Answer

Risk exposure post-mitigation

Answer

Defect density before testing

Answer

Number of test cases executed

Answer

Total lines of code changed

Question 3

In risk-based testing, which factor determines the PRIORITY order in which risks should be tested first?

Accepted Answer

The combination of likelihood and impact

Answer

Alphabetical order of the risk name

Answer

The number of test cases associated with the risk

Answer

The experience level of the tester assigned

Question 4

A software team uses a risk register to track identified risks. What information should a risk register entry typically contain?

Accepted Answer

Risk ID, description, probability, impact, mitigation plan, and owner

Answer

Only the risk description and owner

Answer

Only the mitigation plan and test cases

Answer

Risk ID and the date it was identified

Question 5

Which technique involves creating a diagram that shows the sequence of events leading to a risk materializing?

Accepted Answer

Fault tree analysis

Answer

Risk matrix

Answer

SWOT analysis

Answer

Pareto chart

Question 6

A tester is asked to focus testing efforts on components that have changed recently. This practice BEST exemplifies which risk mitigation approach?

Accepted Answer

Risk-based test prioritization

Answer

Risk avoidance

Answer

Risk transfer

Answer

Risk acceptance

Question 7

Which of the following BEST describes a 'risk appetite' in a software testing context?

Accepted Answer

The level of risk an organization is willing to accept in pursuit of its objectives

Answer

The total number of defects the team is willing to find

Answer

The budget allocated for risk mitigation activities

Answer

The maximum number of open risks allowed in the register