Software Engineering Assessment 5

Question 1

A security assessment finds that user input is directly concatenated into SQL queries. Which vulnerability class does this represent?

Accepted Answer

SQL injection

Answer

Concatenating unsanitized user input into SQL queries allows attackers to manipulate the query structure, a classic SQL injection vulnerability.

Question 2

Which performance assessment test determines how a system behaves when subjected to loads beyond its normal operating capacity?

Accepted Answer

Stress testing

Answer

Stress testing pushes the system beyond its capacity limits to identify breaking points and observe failure behavior.

Question 3

A maturity assessment using the Test Maturity Model Integration (TMMi) evaluates which aspect of software engineering?

Accepted Answer

The organization's testing process capability

Answer

TMMi assesses and guides improvement of an organization's testing processes across five maturity levels.

Question 4

In an agile retrospective used as a team assessment tool, the 'What went well / What to improve' format primarily aims to assess which dimension?

Accepted Answer

Team process and collaboration effectiveness

Answer

Retrospectives assess team dynamics and process health to identify actionable improvements for the next iteration.

Question 5

During a software assessment, 'escapee defects' refer to defects that are identified at which point?

Accepted Answer

After the software is released to production

Answer

Escapee defects (or escaped defects) are those that slip through all testing phases and are discovered only after release.

Software Engineering Practice Test