Risk-Based Testing Strategies Flashcards

A test team is applying a risk-based testing strategy to an e-commerce application. The team identifies that the payment processing module is built with complex, new technology and a failure would have a severe financial impact. According to risk-based principles, how should this information primarily influence the test strategy?

Answer: Allocate more experienced testers and conduct more in-depth testing on this module.

Risk-based testing directs the testing effort to be proportional to the level of risk. [13] A module with high complexity (increasing likelihood of failure) and severe financial impact is considered high-risk. Therefore, it requires more intensive and in-depth testing, often carried out by more experienced personnel, to mitigate the risk of failure in the live environment. [4, 16]

Which of the following activities is a key part of the risk analysis (or risk assessment) phase within a risk-based testing approach?

Answer: Determining the likelihood and impact of each identified risk item.

The risk analysis or assessment phase is specifically concerned with evaluating the identified risks to determine their level. This is typically done by assessing two key dimensions: the likelihood (probability) of the risk occurring and the potential impact (or harm) if it does occur. [6, 7, 11] This assessment allows the team to prioritize the risks for mitigation and testing. [3]

A project is experiencing frequent delays in receiving testable builds from the development team and a shortage of skilled testing staff. In the context of risk-based testing, how are these risks BEST categorized?

Answer: Project Risks

Project risks are those that relate to the management and control of the project, affecting its ability to achieve its objectives on time and within budget. [10, 13] Delays in deliverables and staff shortages are classic examples of organizational and people issues that impact the project's schedule and resources, rather than the intrinsic quality of the software itself. [6, 12, 18]

A team is using a risk-based approach for a new mobile banking application. They have identified a risk item: 'Incorrect calculation of interest on savings accounts.' They assess the likelihood as 'low' but the impact as 'very high'. What is the most appropriate testing response?

Answer: Prioritize this area for thorough and rigorous testing.

In risk-based testing, both likelihood and impact determine the priority. Even if the likelihood of a failure is low, a very high impact (e.g., financial loss, reputational damage) makes it a significant risk. [3] Therefore, such areas must be prioritized for thorough testing to ensure the potential failure is prevented. [2, 11]

Which of the following is the PRIMARY goal of implementing a risk-based testing strategy?

Answer: To optimize testing efforts by focusing on the most critical areas.

The primary goal of risk-based testing is to optimize the allocation of limited testing resources (time, people, budget) by concentrating effort on the parts of the application that pose the greatest risk to the business or users if they fail. [2, 3, 5, 14] This ensures that the most critical defects are found early and that testing is both efficient and effective. [1]

During the risk identification process for an online ticket booking system, the team is brainstorming potential failure areas. Which of the following is the BEST example of a product risk?

Answer: The system may fail to correctly apply a multi-booking discount.

Product risks, also known as quality risks, are related to potential failures of the software itself. [10, 13] An incorrect discount calculation is a failure of the product's functionality. [10] The other options are examples of project risks, as they concern personnel, suppliers, and environments, all of which impact the project's execution rather than the product's intrinsic quality. [12, 18]