ISTQB ISTQB-CTFL ISTQB-Foundation Level Exam Online Training

Question #91

Which of the following issues cannot be identified by static analysis tools?

A . Very low MTBF (Mean Time Between failure)
B . Potentially endless loops
C . Referencing a variable with an undefined value
D . Security vulnerabilities

Correct Answer: A
A

Explanation:

Static analysis tools are software tools that examine the source code of a program without executing it. They can detect various types of issues, such as syntax errors, coding standards violations, security vulnerabilities, and potential bugs12. However, static analysis tools cannot identify issues that depend on the runtime behavior or performance of the program, such as very low MTBF (Mean Time Between failure)3. MTBF is a measure of the reliability of a system or component. It is calculated by dividing the total operating time by the number of failures. MTBF reflects how often a system or component fails during its expected lifetime. Static analysis tools cannot measure MTBF because they do not run the program or observe its failures. MTBF can only be estimated by dynamic testing, which involves executing the program under various conditions and collecting data on its failures4. Therefore, very low MTBF is an issue that cannot be identified by static analysis tools. The other options, such as potentially endless loops, referencing a variable with an undefined value, and security vulnerabilities, are issues that can be identified by static analysis tools. Static analysis tools can detect potentially endless loops by analyzing the control flow and data flow of the program and checking for conditions that may never become false5. Static analysis tools can detect referencing a variable with an undefined value by checking the scope and initialization of variables and reporting any use of uninitialized variables6. Static analysis tools can detect security vulnerabilities by checking for common patterns of insecure code, such as buffer overflows, SQL injections, cross-site scripting, and weak encryption.

Reference = What Is Static Analysis? Static Code Analysis Tools – Perforce Software, How Static Code Analysis Works | Perforce, Static Code Analysis: Techniques, Top 5 Benefits & 3 Challenges, What is MTBF? Mean Time Between Failures Explained | Perforce, Static analysis tools – Software Testing MCQs – CareerRide, ISTQB_Chapter3 | Quizizz, [Static Code Analysis for Security Vulnerabilities | Perforce].

Question #92

A company runs a pilot project for evaluation of a test automation tool.

Which of the following is NOT a valid object of this pilot project?

A . Get familiar with the functionality and options of the tool
B . Check haw the tool fits to the existing test processes
C . Train all testers on using the tool
D . Decide upon standards for tool implementation

Reveal Solution Hide Solution

Question #93

Which of the following applications will be the MOST suitable for testing by Use Cases

A . Accuracy and usability of a new Navigation system compared with previous system
B . A billing system used to calculate monthly charge based or large number of subscribers parameters
C . The ability of an Anti virus package to detect and quarantine a new threat
D . Suitability and performance of a Multi media (audio video based) system to a new operating system

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

A new navigation system compared with a previous system is the most suitable application for testing by use cases, because it involves a high level of interaction between the user and the system, and the expected behavior and outcomes of the system are based on the user’s needs and goals. Use cases can help to specify the functional requirements of the new navigation system, such as the ability to enter a destination, select a route, follow the directions, receive alerts, etc. Use cases can also help to compare the accuracy and usability of the new system with the previous system, by defining the success and failure scenarios, the preconditions and postconditions, and the alternative flows of each use case. Use cases can also help to design and execute test cases that cover the main and exceptional paths of each use case, and to verify the satisfaction of the user’s expectations.

The other options are not the most suitable applications for testing by use cases, because they do not involve a high level of interaction between the user and the system, or the expected behavior and outcomes of the system are not based on the user’s needs and goals. A billing system used to calculate monthly charge based on a large number of subscriber parameters is more suitable for testing by data-driven testing, which is a technique for testing the functionality and performance of a system or component by using a large set of input and output data. The ability of an antivirus package to detect and quarantine a new threat is more suitable for testing by exploratory testing, which is a technique for testing the functionality and security of a system or component by using an informal and flexible approach, based on the tester’s experience and intuition. The suitability and performance of a multimedia (audio video based) system to a new operating system is more suitable for testing by compatibility testing, which is a technique for testing the functionality and performance of a system or component by using different hardware, software, or network environments.

Reference = CTFL 4.0 Syllabus, Section 3.1.1, page 28-29; Section 4.1.1, page 44-45; Section 4.2.1, page 47-48.

Question #94

A program is used to control a manufacturing line (turn machines on and off. start and stop conveyer belts, add raw materials to the flow. etc.). Not all actions are possible at all times. For example, there are certain manufacturing stages that cannot be stopped – unless there is an emergency. A tester attempts to evaluate if all such cases (where a specific action is not allowed) are covered by the tests.

Which coverage metric will provide the needed information for this analysis?

A . Code coverage
B . Data flow coverage
C . Statement coverage
D . Branch Coverage

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

Branch coverage is a type of structural coverage metric that measures the percentage of branches or decision outcomes that are executed by the test cases. A branch is a point in the code where the control flow can take two or more alternative paths based on a condition. For example, an if-else statement is a branch that can execute either the if-block or the else-block depending on the evaluation of the condition. Branch coverage ensures that each branch is taken at least once by the test cases, and thus reveals the behavior of the software under different scenarios. Branch coverage is also known as decision coverage or all-edges coverage.

Branch coverage is suitable for testing the cases where a specific action is not allowed, because it can verify that the test cases cover all the possible outcomes of the conditions that determine the action. For example, if the program has a condition that checks if the manufacturing stage can be stopped, then branch coverage can ensure that the test cases cover both the cases where the stage can be stopped and where it cannot be stopped. This way, branch coverage can help identify any missing or incorrect branches that may lead to undesired or unsafe actions.

The other options are not correct because they are not suitable for testing the cases where a specific action is not allowed. Code coverage is a general term that encompasses various types of coverage metrics, such as statement coverage, branch coverage, data flow coverage, etc. Code coverage does not specify which type of coverage metric is used for the analysis. Data flow coverage is a type of structural coverage metric that measures the percentage of data flow paths that are executed by the test cases. A data flow path is a sequence of statements that define, use, or kill a variable. Data flow coverage is useful for testing the correctness and completeness of the data manipulation in the software, but not for testing the conditions that determine the actions. Statement coverage is a type of structural coverage metric that measures the percentage of statements or lines of code that are executed by the test cases. Statement coverage ensures that each statement is executed at least once by the test cases, but it does not reveal the behavior of the software under different scenarios. Statement coverage is a weaker criterion than branch coverage, because it does not account for the branches or decision outcomes in the code. Reference = ISTQB Certified Tester Foundation Level (CTFL) v4.0 syllabus, Chapter 4: Test Techniques, Section 4.3: Structural Testing Techniques, Pages 51-54.

Question #95

What is test oracle?

A . The source of lest objectives
B . The source for the actual results
C . The source of expected results
D . The source of input conditions

Reveal Solution Hide Solution

Question #96

Which ONE of the following statements does NOT describe how testing contributes to higher quality?

A . Properly designed tests that pass reduce the level of risk in a system.
B . The testing of software demonstrates the absence of defects.
C . Software testing identifies defects, which can be used to improve development activities.
D . Performing a review of the requirement specifications before implementing the system can enhance quality.

Reveal Solution Hide Solution

Question #97

Which of the following statements describes regression testing?

I. Retesting of a fixed defect

II. Testing of an already tested program

III. Testing of new functionality in a program

IV. Regression testing applies only to functional testing

V. Tests that do not nave to be repeatable, because They are only used once

A . II, IV, V
B . I, III, IV
C . II
D . I, IV

Reveal Solution Hide Solution

Question #98

A calculator software is used to calculate the result for 5+6.

The user noticed that the result given is 6.

This is an example of;

A . Mistake
B . Fault
C . Error
D . Failure

Reveal Solution Hide Solution

Question #99

A system has a self-diagnostics module that starts executing after the system is reset. The diagnostics are running 12 different tests on the systems memory hardware.

The following is one of the requirements set for the diagnostics module:

‘The time taking the diagnostics tests to execute shall be less than 2 seconds’

Which of the following is a failure related to the specified requirement?

A . The diagnostic tests fail to start after a system reset
B . The diagnostic tests take too much time to execute
C . The diagnostic tests that measure the speed of the memory, fail
D . The diagnostic tests fail due to incorrect implementation of the test code

Reveal Solution Hide Solution

Question #100

Which of the following statements is an example of testing contributing to higher quality?

A . A test leader writes a test summary report
B . A project manager asks to a test leader to estimate the test effort
C . A tester installs a test ten in the lest environment
D . A tester finds a bug which is resolved prior to release

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

The question is about identifying an example of testing contributing to higher quality. Quality is the degree to which a component, system or process meets specified requirements and/or user/customer needs and expectations1. Testing is the process consisting of all lifecycle activities, both static and dynamic, concerned with planning, preparation and evaluation of software products and related work products to determine that they satisfy specified requirements, to demonstrate that they are fit for purpose and to detect defects2.

Therefore, testing contributes to higher quality by verifying and validating that the software products and related work products meet the specified requirements, are fit for purpose and have no defects, or at least have a reduced number of defects. Testing also provides information about the quality of the software products and related work products to the stakeholders, who can make informed decisions based on the test results3.

Out of the four given statements, only option D is an example of testing contributing to higher quality, as it shows that testing has detected a defect (a flaw in a component or system that can cause the component or system to fail to perform its required function4) and that the defect has been resolved (fixed and confirmed) prior to release (delivery of the software product to the customer or end user). This means that testing has prevented a potential failure (an event in which a component or system does not perform a required function within specified limits) from occurring in the operational environment, and thus has improved the quality of the software product.

Option A is not an example of testing contributing to higher quality, as it is a reporting activity that summarizes the test results and evaluates the test objectives, but does not directly affect the quality of the software product or related work products. A test summary report is a document that records and communicates the outcomes of testing activities, including test completion criteria, test results, incident reports, test summary and evaluation, and lessons learned.

Option B is not an example of testing contributing to higher quality, as it is a planning activity that estimates the resources and time needed for testing activities, but does not directly affect the quality of the software product or related work products. A test effort estimate is an approximation of the amount of work and/or the duration of time required to perform testing activities.

Option C is not an example of testing contributing to higher quality, as it is a preparation activity that sets up the test environment (an environment containing hardware, instrumentation, simulators, software tools, and other support elements needed to conduct a test), but does not directly affect the quality of the software product or related work products. A test environment installation is a process of installing and configuring the test environment according to the test environment specification.

Reference:

1: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 10

2: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 11

3: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 12

4: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 13

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 13

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 77

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 78

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 79

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 80

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 81

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 82

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 83

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 84

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 85

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 86

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 87

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 88

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 89

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 90

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 91

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 92

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 93

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 94

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 95

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 96

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 97

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 98

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 99

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 100

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 101

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 102

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 103

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 104

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 105

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 106

: ISTQB Certified Tester Foundation Level Syllabus 2018, Version 4.0, p. 107