Software Testing Risk Assessment & Management 3 — Questions and Answers
Question 1: Which risk identification technique involves reviewing historical defect data and post-mortem reports from previous projects?
- Delphi technique
- Checklist analysis
- Expert judgment
- Lessons-learned review (Correct answer)
Correct answer: Lessons-learned review
Lessons-learned reviews mine past project data to surface patterns of risk that are likely to recur.
Question 2: Risk-based test prioritization primarily aims to maximize which outcome given limited testing time?
- Code coverage percentage
- Defect detection rate in high-risk areas (Correct answer)
- Number of test cases executed
- Speed of regression suite
Correct answer: Defect detection rate in high-risk areas
Risk-based prioritization focuses testing effort on areas with the highest probability and impact of failure to catch critical defects first.
Question 3: A risk workshop attendee suggests a risk that the team unanimously considers highly unlikely AND low impact. The appropriate action is to:
- Add it to the risk register and monitor it (Correct answer)
- Immediately escalate it to management
- Assign maximum test coverage to it
- Discard it without documentation
Correct answer: Add it to the risk register and monitor it
Even low-likelihood, low-impact risks belong in the risk register so they can be monitored for changes in status.
Question 4: Which qualitative risk analysis output is used to rank risks so teams can decide which to address first?
- Risk probability-impact matrix (Correct answer)
- Monte Carlo simulation results
- Expected monetary value (EMV)
- Decision tree analysis
Correct answer: Risk probability-impact matrix
The probability-impact matrix plots risks on a grid and produces a ranked priority list without requiring numerical monetary data.
Question 5: During test execution, a tester discovers a previously unknown risk in a module rated 'low risk.' What should happen immediately?
- Continue testing per the original plan
- Re-evaluate the risk rating and update the risk register (Correct answer)
- Stop all testing on that module
- Report it only in the final test summary
Correct answer: Re-evaluate the risk rating and update the risk register
Risk registers are living documents; newly discovered risks must be assessed and the register updated to reflect the current risk profile.
Question 6: What is the primary purpose of a risk trigger in project risk management?
- To automatically execute a test case when code changes
- To serve as an early warning indicator that a risk is about to occur (Correct answer)
- To transfer responsibility for a risk to another team
- To calculate the numerical value of a risk
Correct answer: To serve as an early warning indicator that a risk is about to occur
A risk trigger is a condition or event that signals a risk is imminent, allowing the team to activate the contingency plan.
Question 7: Which statement best describes the difference between a risk and an issue in software testing?
- A risk is a past defect; an issue is a future defect
- A risk is a potential future problem; an issue is a problem that has already occurred (Correct answer)
- A risk applies to business; an issue applies to technical code
- A risk is always critical; an issue can be any severity
Correct answer: A risk is a potential future problem; an issue is a problem that has already occurred
A risk is uncertain and may or may not happen in the future, while an issue is a risk that has materialized and is actively impacting the project.
Software Testing Risk Assessment & Management 3
Which risk identification technique involves reviewing historical defect data and post-mortem reports from previous projects?