CAST Risk Management & Mitigation 2

Question 1

A project team discovers a critical defect two days before release. The defect affects only 2% of users in a non-critical workflow. Which risk response is MOST appropriate?

Accepted Answer

Accept the risk and release with a known issues note

Answer

Accepting the risk is appropriate when the impact is low and the cost of mitigation outweighs the benefit, especially close to release.

Question 2

Which metric is MOST useful for tracking residual risk after mitigation actions have been applied?

Accepted Answer

Risk exposure post-mitigation

Answer

Risk exposure post-mitigation measures the remaining risk level after controls are applied, directly tracking residual risk.

Question 3

In risk-based testing, which factor determines the PRIORITY order in which risks should be tested first?

Accepted Answer

The combination of likelihood and impact

Answer

Risk priority in risk-based testing is determined by multiplying (or combining) likelihood and impact to produce a risk level.

Question 4

A software team uses a risk register to track identified risks. What information should a risk register entry typically contain?

Accepted Answer

Risk ID, description, probability, impact, mitigation plan, and owner

Answer

A complete risk register entry includes identification, assessment (probability and impact), mitigation strategy, and accountability (owner).

Question 5

Which technique involves creating a diagram that shows the sequence of events leading to a risk materializing?

Accepted Answer

Fault tree analysis

Answer

Fault tree analysis uses a top-down logical diagram to map failure modes and their contributing causes.

(CAST) Certified Associate in Software Testing Practice Test

(CAST) Certified Associate in Software Testing Practice Test

CAST Risk Management & Mitigation 2