ISTQB - International Software Testing Qualifications Board Risk-Based Testing Strategies Questions and Answers

Question 1

A test team is applying a risk-based testing strategy to an e-commerce application. The team identifies that the payment processing module is built with complex, new technology and a failure would have a severe financial impact. According to risk-based principles, how should this information primarily influence the test strategy?

Accepted Answer

Allocate more experienced testers and conduct more in-depth testing on this module.

Answer

Risk-based testing directs the testing effort to be proportional to the level of risk. [13] A module with high complexity (increasing likelihood of failure) and severe financial impact is considered high-risk. Therefore, it requires more intensive and in-depth testing, often carried out by more experienced personnel, to mitigate the risk of failure in the live environment. [4, 16]

Question 2

Which of the following activities is a key part of the risk analysis (or risk assessment) phase within a risk-based testing approach?

Accepted Answer

Determining the likelihood and impact of each identified risk item.

Answer

The risk analysis or assessment phase is specifically concerned with evaluating the identified risks to determine their level. This is typically done by assessing two key dimensions: the likelihood (probability) of the risk occurring and the potential impact (or harm) if it does occur. [6, 7, 11] This assessment allows the team to prioritize the risks for mitigation and testing. [3]

Question 3

A project is experiencing frequent delays in receiving testable builds from the development team and a shortage of skilled testing staff. In the context of risk-based testing, how are these risks BEST categorized?

Accepted Answer

Project Risks

Answer

Project risks are those that relate to the management and control of the project, affecting its ability to achieve its objectives on time and within budget. [10, 13] Delays in deliverables and staff shortages are classic examples of organizational and people issues that impact the project's schedule and resources, rather than the intrinsic quality of the software itself. [6, 12, 18]

Question 4

A team is using a risk-based approach for a new mobile banking application. They have identified a risk item: 'Incorrect calculation of interest on savings accounts.' They assess the likelihood as 'low' but the impact as 'very high'. What is the most appropriate testing response?

Accepted Answer

Prioritize this area for thorough and rigorous testing.

Answer

In risk-based testing, both likelihood and impact determine the priority. Even if the likelihood of a failure is low, a very high impact (e.g., financial loss, reputational damage) makes it a significant risk. [3] Therefore, such areas must be prioritized for thorough testing to ensure the potential failure is prevented. [2, 11]

Question 5

Which of the following is the PRIMARY goal of implementing a risk-based testing strategy?

Accepted Answer

To optimize testing efforts by focusing on the most critical areas.

Answer

The primary goal of risk-based testing is to optimize the allocation of limited testing resources (time, people, budget) by concentrating effort on the parts of the application that pose the greatest risk to the business or users if they fail. [2, 3, 5, 14] This ensures that the most critical defects are found early and that testing is both efficient and effective. [1]

ISTQB - International Software Testing Qualifications Board Practice Test

ISTQB - International Software Testing Qualifications Board Practice Test

ISTQB - International Software Testing Qualifications Board Risk-Based Testing Strategies Questions and Answers