ISTQB Cheat Sheet 2026

The 30 highest-yield ISTQB facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. At which test level are user stories most commonly used as the test basis in Agile development? → Acceptance testing
2. During which phase of a formal review process do participants examine the work product to identify potential defects BEFORE the review meeting? → Individual Preparation
3. Which of the following is an example of functional testing? → Verifying that a login form rejects invalid credentials
4. A moderator in a review meeting is someone who: → bridges interpersonal conflicts
5. During which activity of the Fundamental Test Process are the overall testing objectives and test approach defined? → Test Planning and Control
6. While test execution tools are highly effective for automating repetitive tasks, for which of the following activities would manual testing be more appropriate? → Assessing the usability and user-friendliness of a new application interface.
7. When may the software development process begin to include testing? → Once the software specifications are accepted
8. Which of the following does not appear on the ISO 9126 Standard's list of quality characteristics? → Supportability
9. Testing boundary values: → Test the boundaries of the input and output equivalency classes above, below, and on.
10. Select the most accurate meaning of quality: → Conformance to the specifications
11. Which of the following is the PRIMARY input for the error guessing technique? → The tester's knowledge and intuition
12. Operational acceptance testing (OAT) primarily focuses on: → Validating operational readiness including backup, recovery, and maintenance procedures
13. In a formal review process, which role is primarily responsible for planning the review, leading the meeting, and ensuring the process is followed correctly? → Moderator
14. One of the main causes of developers' challenges in testing their work is: → Absence of objectivity
15. Which of the following is the PRIMARY goal of implementing a risk-based testing strategy? → To optimize testing efforts by focusing on the most critical areas.
16. Which of the following activities is a key part of the risk analysis (or risk assessment) phase within a risk-based testing approach? → Determining the likelihood and impact of each identified risk item.
17. What is the purpose of 'impact analysis' in maintenance testing? → Identifying which parts of the system are affected by a change to scope regression testing
18. Structural testing (white-box testing) derives test cases primarily from: → The internal code structure, such as control flow or data flow
19. What is the primary objective of system testing? → Verify the complete integrated system meets specified requirements
20. Which test type specifically targets vulnerabilities and attempts to find unauthorized access to system data? → Security testing
21. Which of the following is an organizational success factor for reviews? → Management allocates adequate time for review activities in project schedules.
22. What forms the basis of acceptance test cases? → Requirements
23. As a test manager, which of the following actions may you take to mitigate project risk? → Acquiring additional testing facilities in case one fails while being tested
24. What is the primary objective of a defect triage meeting? → To review, prioritize, and assign responsibility for newly reported defects.
25. In any software development lifecycle model, which of the following is considered a characteristic of good testing? → For every development activity, there is a corresponding testing activity.
26. Which of the following projects would benefit most from failure mode and effect analysis as a risk analysis method? → The system being tested is crucial for safety and is also complicated.
27. Which test level focuses on verifying that individual components work correctly together? → Integration testing
28. In integration testing, what is a 'driver'? → A replacement component that calls or invokes the component under test
29. Which of the following scenarios describes a PRODUCT risk, as opposed to a project risk? → The software might not be compatible with a newly released operating system.
30. Which of the following is a primary objective of Acceptance Testing? → To establish confidence that the system meets the needs of the users and stakeholders.