Which of the following statements is true?

Consider the following examples of risks identified in different software development projects:

[I]. The contrast color ratio for both normal text and large text of a website does not comply with the applicable accessibility guidelines, making itdifficult for many users to read the content on the pages

[II]. A development vendor fails to deliver their software system on time, causing significant delays to system integration testing activities that havebeen planned as part of a development project for a system of systems

[III]. People in the test team do not have sufficient skills to automate tests at the test levels required by the test automation strategy which does notallow production of an effective regression test suite

[IV]. In a web application, data from untrusted sources is not subject to proper input validation, making the applicationvulnerable to several securityattacks

Which of the following statements is true?
A . [I] and [III] are product risks; [II] and [IV] are project risks
B . [I] and [IV] are product risks. [II] and [III] are project risks
C . [II], [III] and [IV] are product risks; [I] is a project risk
D . [IV] is a product risk; [I]. [II] and [III] are project risks

View Answer

Answer: B

Explanation:

This answer is correct because product risks are risks that affect the quality of the software product, such as defects, failures, or non-compliance with requirements or standards. Project risks are risks that affect the project’s schedule, budget, resources, or scope, such as delays, cost overruns, skill gaps, or scope changes. In this case, [I] and [IV] are product risks, as they relate to the accessibility and security of the software product, which are quality attributes. [II] and [III] are project risks, as they relate to the delivery time and the test automation skills of the test team, which are project factors. References: ISTQB Glossary of Testing Terms v4.0, ISTQB Foundation Level Syllabus v4.0, Section 2.1.1.1