Software Testing Risk Assessment & Management 2

Question 1

Which risk metric is calculated by multiplying the probability of a defect escaping to production by the cost of fixing it post-release?

Accepted Answer

Risk exposure

Answer

Risk exposure = probability × impact, giving a monetary or weighted measure of expected loss.

Question 2

During risk-based testing, a module has HIGH consequence but LOW likelihood. Which priority level should it receive?

Accepted Answer

Medium

Answer

High consequence combined with low likelihood typically places a risk in the medium priority band on a risk matrix.

Question 3

A tester identifies a risk that is outside the project scope to mitigate. What is the correct response strategy?

Accepted Answer

Accept the risk

Answer

When mitigation is outside scope, the project formally accepts the risk and documents it in the risk register.

Question 4

What does 'residual risk' mean in a software testing context?

Accepted Answer

Risk remaining after mitigation actions have been applied

Answer

Residual risk is the level of risk that remains after all planned risk responses and controls have been implemented.

Question 5

Which technique uses structured brainstorming guided by category prompts (e.g., People, Process, Technology) to identify software risks?

Accepted Answer

Ishikawa (fishbone) diagram

Answer

The Ishikawa diagram organizes potential causes of failure into branches that map to risk categories like process or technology.

Software Testing Practice Test