Software Testing Regulatory Frameworks & Compliance 5

Question 1

Under CCPA (California Consumer Privacy Act), testing of a web application should verify which consumer-facing functionality?

Accepted Answer

That consumers can opt out of the sale of their personal information

Answer

CCPA requires businesses to provide a clear mechanism for California consumers to opt out of the sale of their personal information, which must be tested for correct functionality.

Question 2

In a regulated pharmaceutical environment following GAMP 5 guidelines, what category would fully custom-developed software fall under?

Accepted Answer

Category 5

Answer

GAMP 5 Category 5 covers custom applications developed to meet specific user requirements, requiring the highest level of validation effort.

Question 3

What does 'boundary value testing' help verify in a compliance context for financial software?

Accepted Answer

That the system correctly handles regulatory thresholds such as transaction reporting limits

Answer

In financial compliance, boundary value testing ensures systems correctly trigger regulatory actions (like suspicious activity reports) at mandated thresholds.

Question 4

Which FedRAMP testing requirement distinguishes cloud service providers seeking government contracts from standard commercial cloud vendors?

Accepted Answer

Undergoing a third-party security assessment against NIST 800-53 controls

Answer

FedRAMP requires cloud service providers to have their security controls independently assessed by an accredited Third Party Assessment Organization (3PAO).

Question 5

A test team is documenting their work on a nuclear plant control system under IEC 62645. What makes test documentation requirements here STRICTER than typical commercial software?

Accepted Answer

Documentation must support post-incident forensic analysis and regulatory inspections for the plant's operational lifetime

Answer

Nuclear plant software documentation must withstand regulatory inspection and support incident investigation across decades of plant operation, far exceeding typical commercial retention needs.

Software Testing Practice Test

Software Testing Practice Test

Software Testing Regulatory Frameworks & Compliance 5