ISTQB Tool Support for Testing 4 — Questions and Answers
Question 1: Which of the following activities is LEAST likely to benefit from test automation?
- Regression testing of stable features after each build
- Exploratory testing to investigate unexpected system behavior (Correct answer)
- Load testing with hundreds of simulated concurrent users
- Executing the same data-driven test with multiple input sets
Correct answer: Exploratory testing to investigate unexpected system behavior
Exploratory testing relies on human intuition, creativity, and real-time decision-making, which cannot be effectively replicated by automated tools.
Question 2: What is the primary purpose of a test data management tool?
- To execute test scripts across multiple environments simultaneously
- To create, store, retrieve, and manage test data needed for test execution (Correct answer)
- To report defects found during testing directly to developers
- To measure application response time under load
Correct answer: To create, store, retrieve, and manage test data needed for test execution
Test data management tools handle the provisioning, masking, subsetting, and lifecycle management of test data to ensure tests have appropriate inputs.
Question 3: Which of the following statements about CI/CD pipeline integration with test tools is TRUE?
- Test tools in CI/CD pipelines must always be open-source to enable integration
- Automated tests triggered by CI/CD pipelines provide rapid feedback on build quality (Correct answer)
- CI/CD integration requires replacing all manual testing with automated testing
- Test results from CI/CD pipelines cannot be stored in test management tools
Correct answer: Automated tests triggered by CI/CD pipelines provide rapid feedback on build quality
Integrating automated tests into CI/CD pipelines enables immediate feedback on whether new code changes break existing functionality.
Question 4: A tool that analyzes source code to detect security vulnerabilities such as SQL injection or buffer overflows without executing the code is known as a:
- Dynamic application security testing (DAST) tool
- Static application security testing (SAST) tool (Correct answer)
- Fuzz testing tool
- Intrusion detection tool
Correct answer: Static application security testing (SAST) tool
SAST tools analyze source, bytecode, or binary code for security vulnerabilities statically, without requiring the application to be running.
Question 5: When evaluating commercial test tools, which criterion relates to the vendor's ability to provide ongoing support and updates?
- Interoperability
- Vendor viability (Correct answer)
- Scriptability
- Portability
Correct answer: Vendor viability
Vendor viability assesses the financial stability and long-term support commitment of the tool provider, reducing the risk of tool abandonment.
Question 6: What does 'data-driven testing' mean in the context of test automation?
- Tests that are generated automatically from a database schema
- A technique where the same test script is executed with multiple sets of input data stored externally (Correct answer)
- Testing that focuses exclusively on database performance and integrity
- Automated generation of test data using machine learning algorithms
Correct answer: A technique where the same test script is executed with multiple sets of input data stored externally
Data-driven testing separates test logic from test data, allowing one script to run against many input/expected-output pairs stored in files or databases.
Question 7: Which of the following is a primary concern when using open-source test automation tools compared to commercial ones?
- Open-source tools are always less capable than commercial alternatives
- Open-source tools typically lack vendor support contracts, requiring internal expertise for maintenance (Correct answer)
- Open-source tools cannot be integrated with defect tracking systems
- Open-source tools are prohibited in regulated industries
Correct answer: Open-source tools typically lack vendor support contracts, requiring internal expertise for maintenance
Open-source tools do not include vendor support agreements, so organizations must rely on community resources or internal expertise for troubleshooting and maintenance.
ISTQB Tool Support for Testing 4
Which of the following activities is LEAST likely to benefit from test automation?