NO.22 The following are the exit criteria described in the test plan of a software product:
EX1. The test suite for the product must ensure that at least each quality risk item is covered by at least one test case (a quality risk item can be covered by more test cases).
EX2. All test cases in the test suite must be run during the execution phase.
EX3. Defects are classified into two categories: “C” (critical defect) and “NC” (non-critical defect). No known C defects shall exist in the product at the end of the test execution phase.
Which of the following information is useless when the specified exit criteria is evaluated?
K2 1 credit

NO.23 Test Tools and Automation
Assume you are a Test Manager involved in system testing of a CRM application for a Pay-TV company.
Currently the application is able to support a proper number of users assuring the required responsiveness. Since the business is expected to grow, you have been asked to evaluate the ability of the application to grow to support more users while maintaining the same responsiveness.
Which of the following tools would you expect to be the most useful at performing this evaluation?

NO.24 Test Management
Based on the historical data of 5 past and similar projects, you have calculated these average numbers of defects detected in system testing:
– for each 10000 LOC (lines of code), 200 defects
– for each person-month of development team effort, 49 defects
You want to use this information to perform estimation for a new project.
The project manager tells you that he/she has estimated 20000 new LOC for this new project.
Four developers work for four months on this project before system testing.
During system testing, 797 defects are discovered.
Assume that the system test of this new project is using the same amount of work as spent in the past projects.
Based on this information only, which of the following statement is certainly true about this project?
Number of correct responses: 1
K3 3 credits

NO.25 Consider a defect report and assume that a part of its lifecycle includes the following states:
New: Is the initial state
WorkinG. Means that the developers are addressing the defect in order to produce a fix for the defect Clarification: Means that the developers need more information from the tester to address the defect and produce a fix for the defect and the tester is working to provide this information to the developers Verification: Means that a fix for the defect has been produced and the tester is running the adequate tests to verify whether the fix solves the defect
CloseD. is the final state
Which of the following answers represents an invalid sequence of states that can’t lead the bug report to the “Closed” state?
K2 1 credit

NO.26 Test Management
In the test strategy document your organization declares:
– to adopt a V-model development lifecycle, with three formal levels of testing: unit, integration and system testing
– to use a blended risk-based and regression-averse testing strategy for each level of testing The following is an excerpt of the “approach” section for the system test plan document of a new project:
“Testing will only use manual tests. Due to the short period of time for test execution, the following activities will be performed in parallel with test execution: Test planning, test analysis and test design.
Basic metrics will be taken for test effort (i.e. person-hours), test cases executed (passed/failed), and incidents (no more metrics, such as code coverage, will be collected).” In the system test plan, no deviations from the test strategy are described.
Based only on the given information, which of the following statements is true?
Number of correct responses: 1
K4 3 credits

NO.27 Test Management
You are the Test Manager of a new project aimed at developing a software system that must be certified at level B of the DO-178B standard. The project will follow a V-Model software development life cycle and it will have four formal levels of testing: component, integration, system and acceptance testing.
You must produce the test plan documentation for this project by providing an adequate coordination across the four levels of testing in order to assure auditability.
Which of the following answers would you expect to best describe how to organize the test plan?

NO.28 Defect Management
During the system testing phase a tester from your test team observes a failure in the system under test and he/she decides to create an incident report. The incident report is currently in a “new” state, indicating it needs to be investigated.
Which THREE of the following information items can’t yet be present in the incident report?

NO.29 Which of the following statements about management of product quality risks in mature organizations with respect to the lifecycle, is true?
K2 1 credit

NO.30 You are the Test Manager of a new project that will have three formal levels of testinG. unit, integration and system testing. The testing strategy you decide to adopt a blend of risk-based testing and reactive testing strategies.
Which of the following answers describes the most consistent example of implementation of this test strategy during the execution of the system tests?
K2 1 credit

NO.31 Test Management
The following chart plots the cumulative number of defects opened against the cumulative number of defects closed during system testing of a software product.

Which of the following statements is true?

NO.32 Defect Management
Consider a defect report and assume that a part of its lifecycle includes the following states:
New: Is the initial state
Working: Means that the developers are addressing the defect in order to produce a fix for the defect Clarification: Means that the developers need more information from the tester to address the defect and produce a fix for the defect and the tester is working to provide this information to the developers Verification: Means that a fix for the defect has been produced and the tester is running the adequate tests to verify whether the fix solves the defect Closed: is the final state Which of the following answers represents an invalid sequence of states that can’t lead the bug report to the
“Closed” state?
Number of correct responses: 1
K2 1 credit

NO.33 Test Management
Assume you are managing the system testing phase of a project.
The system test execution period is scheduled to twenty weeks.
All tests are manual tests. You are following a risk-driven test approach.
During the last staff meeting the project manager tells you new deadlines that will not allow completion of all the system tests.
Which of the following would you expect to be the best way to respond to this situation?
Number of correct responses: 1
K2 1 credit

NO.34 Test Management
Which of the following answers describes a factor that may reduce the effort spent when using distributed test teams without negatively affecting system quality?
Number of correct responses: 1
K2 1 credit

NO.35 Improving the Testing Process
Which of the following statements about the TMMi test process improvement model is true?

NO.36 Assume you are working on a CAS (Conditional Access System) for Pay-TV that allows the access, selection and transfer of services and media to authorized users. Authorized users can choose their services through different channels: Web Customer Portal, IVR (Interactive Voice Response), Call Centre and SMS. The system uses a Smart Card to receive and decrypt the broadcasted encrypted control words which allow decrypting pay-per-view TV. Every authorized user must have a Smart Card and a Set-Top Box to view the contents.
The following is an excerpt from the product risk analysis document: Both likelihood and impact have been rated on the following scale: (1 – Very low, 2 – Low, 3 – Medium, 4 – High, 5 – Very High).
The required test environment and code have been delivered. All test cases for each identified product risk item have been written and are ready to be executed. The Database used to contain the Smart Cards is empty and so only new Smart Cards can be used during test execution.
A Smart Card can only be activated if it has been previously pre-activated. This means the post-conditions for the execution of the test cases to test the pre-activation of the Smart Card are the pre-conditions for activation of the Smart Card.
Which of the following statements represents the most effective contribution of the stakeholders to the completion of the failure mode analysis table?

K4 3 credits

NO.37 Test Management
You are the Test Manager on a project following an iterative life-cycle model. The project should consist of nine iterations of one month duration each. It is planned to develop the most important features to have a stable core of the application in the first three iterations and to add the additional features in the last six iterations.
At the beginning of the first iteration, only a draft version of the requirements specification document for the core features is available. Assume that during each of the first three iterations, the chosen features are fully completed and unit tested.
Which of the following statements is true in this context?

NO.38 Test Management
You are managing the system testing for a SOA based system. The integrated system consists of several subsystems:
– a SOA middleware
– a CRM (Customer Relationship Management) system
– a BRM (Billing and Revenue Management) system
– a SMS (Subscriber Management System) system
and you performed a risk analysis based on these subsystems.
At the end of the scheduled period for test execution you produce a first classical report based on the traditional metrics of testing. Test pass/fail status and bug status (open/resolved) That table provides you a distorted picture of the quality risk, because there is no indication of the risk level of the failed tests, the tests not run, or the open bugs. Thus, you produce the following table to solve this distortion issue:

In the table above, where you have introduced the concept of risk weighting, the highest risk test or bug report has a score of 1, while the lowest risk test or bug report has a score of 0.04.
Which of the following subsystems, based on the risk scores of the table, is most risky?

NO.39 The following is the unique “critical” quality risk item that has been identified:
CR-RSK-1. The GUI of the application might accept non-integer values for the input field designed to get the number of bottles from the user Test analysis for system testing has just begun and the following test conditions have been identified:
TC-SEL-2. Test the selection of the package sizes
TC-SEL-4. Test wrong numbers of bottles for an order
TC-CR-RSK-1. Test the accepted values from the input field designed to get the number of bottles from the user What is the MINIMUM number of test conditions that must be added to fulfill both the EXCR1 and EXCR2 exit criteria?
Number of correct responses: 1
K3 2 credits

NO.40 Consider the following statements describing the importance of improving the test process:
I. Test process improvement is important because being focused only on the test process it can provide recommendations to improve the test process itself, but it can’t indicate or suggest improvement to areas of the development process
II. Test process improvement is important because it is much more effective than software process improvement to improve the quality of a software system
III. Test process improvement is important because several process improvement models (STEP, TPI Next, TMMi) have been developed over the years
IV. Test process improvement is important because every organization, regardless of the context, should always achieve the maximum level of maturity of testing described in the test improvement models such as TMMi
Which of the following answers is correct?
K2 1 credit

NO.41 Consider an agile team adopting Extreme Programming (XP) with five developers and one tester without any coding experience.
To which of the following activities would you expect the tester will contribute most?
K2 1 credit

NO.42 In the test strategy document your organization declares:
–
To adopt a V-model development lifecycle, with three formal levels of testinG. unit, integration and system testing
–
To use a blended risk-based and regression-averse testing strategy for each level of testing
The following is an excerpt of the “approach” section for the system test plan document of a new project:
“Testing will only use manual tests. Due to the short period of time for test execution, the following activities will be performed in parallel with test execution: Test planning, test analysis and test design.
Basic metrics will be taken for test effort (i.e. person-hours), test cases executed (passed/failed), and incidents (no more metrics, such as code coverage, will be collected).”
In the system test plan, no deviations from the test strategy are described.
Based only on the given information, which of the following statements is true?
K4 3 credits

NO.43 Test Management
You are working on a project to develop an authentication system for an e-commerce website. This system provides two features: Registration and authentication. Two different development teams develop these two features.
There is a high likelihood that the delivery of the authentication feature to the test team will be three weeks later. To complete the registration the user must provide the following registration inputs: Name, surname, birthdate, fiscal code and he/she can select a username and a password.
A registered user can be a special user or a normal user. To be identified as a special user, he/she must also provide, during the registration process, a voucher possibly received from the IT department.
Access is granted only if a user is registered and the password is correct: In all other cases access is denied. If the registered user is a special user and the password is wrong, a special warning is shown on the system console.
You are currently performing a quality risk analysis using FMEA.
Based only on the given information, which of the following is NOT a product risk that could be identified during the quality risk analysis?
Number of correct responses: 1
K4 3 credits

NO.44 The following are the requirements identified as “critical”:
REQ-SEL-001. The user shall be able to combine all the three products with all the four durations to define an item to purchase REQ-SEL-002. The user shall be able to add a maximum of six different items to the shopping cart REQ-PUR-001. The user shall be able to purchase all the items in the shopping cart using a credit voucher REQ-PUR-002. The user shall be able to purchase all the items in the shopping cart using the available credit already charged on the smartcard REQ-PUR-003. The user shall be able to purchase all the items in the shopping cart using all the accepted credit cards (Visa, MasterCard and Great Wall Card) REG-LOGO-001. The user shall be able to logout (by clicking the logout button) from both the “select” and
“purchase” pages going back to the “browse” page (anonymous navigation) Moreover the following quality risk item has been identified as “critical”:
QR-P1. The web customer portal might not be able to provide the expected response time (less than 10 sec) for the purchase transactions under a load of up-to 1000 concurrent users Test analysis for system testing has just begun and the following test conditions have been identified:
TC-SEL-01. Test the combinations of products and durations to define an item to purchase TC-SEL-02. Test the maximum number of items, which can be added to the shopping cart TC-PUR-01. Test the purchase of an item TC-PUR-02. Test the purchase of an item with the credit charged on the smartcard What is the MINIMUM number of test conditions that must be added to fulfill both the EXCR1 and EXCR2 exit criteria?
Number of correct responses: 1
K3 2 credits