TS Standards & Compliance 2 — Questions and Answers
Question 1: According to ISO/IEC 29119, which document defines the test conditions and test data to be used during testing?
- Test Plan
- Test Design Specification (Correct answer)
- Test Case Specification
- Test Completion Report
Correct answer: Test Design Specification
The Test Design Specification defines the features to be tested, the test conditions, and the approach for deriving test cases.
Question 2: Which IEEE standard specifically addresses software verification and validation processes?
- IEEE 829
- IEEE 1012 (Correct answer)
- IEEE 730
- IEEE 1028
Correct answer: IEEE 1012
IEEE 1012 is the standard for software and system verification and validation (V&V) processes.
Question 3: A compliance audit finds that testers are not documenting test results per the required standard. What is the FIRST corrective action?
- Terminate the testing phase and restart
- Update the test plan to remove the requirement
- Identify the root cause and implement a corrective action plan (Correct answer)
- Reassign testers to other projects
Correct answer: Identify the root cause and implement a corrective action plan
The first step in responding to a compliance finding is root-cause analysis followed by a documented corrective action plan.
Question 4: In the context of DO-178C (aviation software), what does 'structural coverage' primarily refer to?
- The percentage of requirements traced to test cases
- The degree to which source code structures are exercised by tests (Correct answer)
- The number of hardware components tested
- The ratio of passed tests to total tests executed
Correct answer: The degree to which source code structures are exercised by tests
Structural coverage in DO-178C measures how thoroughly the source code (statements, decisions, MC/DC paths) is exercised by the test suite.
Question 5: Which compliance framework introduced the concept of 'Defense in Depth' as a security testing requirement?
- HIPAA
- NIST SP 800-53 (Correct answer)
- PCI-DSS
- SOX
Correct answer: NIST SP 800-53
NIST SP 800-53 promotes Defense in Depth by requiring multiple layers of security controls that must be verified through testing.
Question 6: Under GDPR compliance testing, which test scenario is MOST relevant to the 'right to erasure'?
- Verify that user data is encrypted at rest
- Confirm that deleted user records are removed from all data stores including backups (Correct answer)
- Check that consent banners display correctly
- Test that login sessions expire after inactivity
Correct answer: Confirm that deleted user records are removed from all data stores including backups
The right to erasure ('right to be forgotten') requires that personal data be deleted from all systems, including backups, upon valid request.
Question 7: Which test documentation artifact is required by ISO/IEC 29119-3 to formally close a test level?
- Test Execution Log
- Test Completion Report (Correct answer)
- Defect Report
- Test Design Specification
Correct answer: Test Completion Report
The Test Completion Report summarizes testing activities and results and is the formal document used to close a test level under ISO/IEC 29119-3.
TS Standards & Compliance 2
According to ISO/IEC 29119, which document defines the test conditions and test data to be used during testing?