iSQI CTFL_Syll_4.0 ISTQB Certified Tester Foundation Level (CTFL) v4.0 Exam Practice Test

Confirmation testing is performed after a defect is fixed, and if such testing is successful then the regression tests that are relevant for such fix can be executed. Confirmation testing, also known as re-testing, is the process of verifying that a defect has been resolved by running the test case that originally detected the defect. Confirmation testing is usually done before regression testing, which is the process of verifying that no new defects have been introduced in the software as a result of changes or fixes. Therefore, option D is the correct answer.

Dynamic testing requires the execution of the software to evaluate its behavior and performance. In contrast, static testing involves examining the software's code, design, and documentation without executing the software. This makes static testing applicable to non-executable work products such as requirement documents, design documents, and source code.

When a document management system is decommissioned, maintenance testing must include data migration testing to ensure that all documents are correctly transferred to a state archive, meeting legal requirements for long-term storage. This process verifies that data integrity is maintained during migration.

Retrospectives provide value by fostering improvement and collaboration. The correct mapping is:

A2: Team bonding occurs when teams openly discuss issues.

B1: Test effectiveness increases when process improvements are implemented.

C4: Test basis improves by addressing requirement deficiencies.

D3: Cooperation improves through regular review of collaboration.

A test plan serves multiple purposes, such as defining the scope, approach, resources, and schedule of the testing activities. It also helps in communicating important information and managing stakeholder expectations. In agile projects, test plans might be concise to align with agile principles of simplicity and flexibility. A one-page test plan can effectively communicate broad activities and strategic decisions, such as not writing detailed test cases due to the project's agile nature. This approach ensures that essential information is conveyed without unnecessarydocumentation overhead, adhering to the agile manifesto's value of "working software over comprehensive documentation"​​.

One of the primary benefits of using test automation tools is the reduction in time spent on repetitive tasks. Automation allows tests to be run quickly and consistently, freeing up testers to focus on more complex and exploratory testing tasks. While automation can help increase test coverage and improve efficiency, it does not necessarily reduce the number of found bugs or always decrease the total cost of the test project.

Experience-based test techniques are test design techniques that rely on the experience, knowledge, intuition, and creativity of the testers to identify and execute test cases that are likely to find defects in the software system. Experience-based test techniques are often useful to detect hidden defects that have not been targeted by black-box test techniques, which are test design techniques that use the external behavior and specifications of the software system as the test basis, without considering its internal structure or implementation. Experience-based test techniques can complement black-box test techniques by covering aspects that are not explicitly specified, such as usability, security, reliability, performance, etc. The other statements are false, because:

Experience-based test techniques do not rely on the experience of testers to identify the root causes of defects found by black-box test techniques, but rather to identify the potential sources of defects based on their own insights, heuristics, or exploratory testing. The root causes of defects are usually identified by debugging or root cause analysis, which are activities that involve examining the code or the development process to find and fix the errors that led to the defects.

Some of the most common test basis used by white-box test techniques include the source code, the design documents, the architecture diagrams, and the control flow graphs of the software system. White-box test techniques are test design techniques that use the internal structure and implementation of the software system as the test basis, and aim to achieve a certain level of test coverage based on the code elements, such as statements, branches, paths, etc. User stories, use cases, and business processes are examples of test basis used by black-box test techniques, as they describe the functional and non-functional requirements of the software system from the perspective of the users or the stakeholders.

The primary goal of experience-based test techniques is not to design test cases that can be easily automated using a GUI-based test automation tool, but rather to design test cases that can reveal defects that are not easily detected by other test techniques, such as boundary value analysis, equivalence partitioning, state transition testing, etc. Test automation is the use of software tools to execute test cases and compare actual results with expected results, without human intervention. Test automation can be applied to different types of test techniques, depending on the test objectives, the test levels, the test tools, and the test resources. However, test automation is not always feasible or beneficial,especially for test cases that require human judgment, creativity, or exploration, such as those designed by experience-based test techniques. References: ISTQB Certified Tester Foundation Level (CTFL) v4.0 sources and documents:

ISTQB® Certified Tester Foundation Level Syllabus v4.0, Chapter 2.2.1, Black-box Test Design Techniques

ISTQB® Certified Tester Foundation Level Syllabus v4.0, Chapter 2.2.2, White-box Test Design Techniques

ISTQB® Certified Tester Foundation Level Syllabus v4.0, Chapter 2.2.3, Experience-based Test Design Techniques

ISTQB® Glossary of Testing Terms v4.0, Experience-based Test Technique, Black-box Test Technique, White-box Test Technique, Test Basis, Test Coverage, Test Automation

The support offered by a performance testing tool is often leveraged by testers to run load tests, which are tests that simulate a large number of concurrent users or transactions on the system under test, in order to measure its performance, reliability, and scalability. Performance testing tools can help testers to generate realistic workloads, monitor system behavior, collect and analyze performance metrics, and identify performance bottlenecks. The other statements are false, because:

A test data preparation tool is a tool that helps testers to create, manage, and manipulate test data, which are the inputs and outputs of test cases. Test data preparation tools are not directly related to running automated regression test suites, which are test suites that verify that the system still works as expected after changes or modifications. Regression test suites are usually executed by test execution tools, which are tools that can automatically run test cases and compare actual results with expected results.

A bug prediction tool is a tool that uses machine learning or statistical techniques to predict the likelihood of defects in a software system, based on various factors such as code complexity, code churn, code coverage, code smells, etc. Bug prediction tools are not used by testers to track the bugs they found, which are the actual defects that have been detected and reported duringtesting. Bugs are usually tracked by defect management tools, which are tools that help testers to record, monitor, analyze, and resolve defects.

A continuous integration tool is a tool that enables the integration of code changes from multiple developers into a shared repository, and the execution of automated builds and tests, in order to ensure the quality and consistency of the software system. Continuous integration tools are not used by testers to automatically generate test cases from a model, which are test cases that are derived from a representation of the system under test, such as a state diagram, a decision table, a use case, etc. Test cases can be automatically generated by test design tools, which are tools that support the implementation and maintenance of test cases, based on test design specifications or test models. References: ISTQB Certified Tester Foundation Level (CTFL) v4.0 sources and documents:

ISTQB® Certified Tester Foundation Level Syllabus v4.0, Chapter 3.4.1, Types of Test Tools

ISTQB® Glossary of Testing Terms v4.0, Performance Testing Tool, Test Data Preparation Tool, Bug Prediction Tool, Continuous Integration Tool, Test Execution Tool, Defect Management Tool, Test Design Tool

The minimum number of test cases needed to cover the full decision table associated with this scenario is 6. This is because the decision table has 4 conditions (type of customer and amount of sale) and 4 actions (bonus percentage). The conditions have 2 possible values each (Basic or Premium, and G1, G2 or G3), so the total number of combinations is 2 x 2 x 2 x 2 = 16. However, not all combinations are valid, as some of them are contradictory or impossible. For example, a sale cannot be both less than 300 euros and greater than 2000 euros at the same time. Therefore, we need to eliminate the invalid combinations and keep only the valid ones. The valid combinations are:

Type of customer

Amount of sale

Bonus percentage

Basic

G1

3%

Basic

G2

5%

Basic

G3

7%

Premium

G1

5%

Premium

G2

7%

Premium

G3

10%

These 6 combinations cover all the possible values of the conditions and actions, and they are the minimum number of test cases needed to cover the full decision table.

In the ISTQB CTFL Syllabus, it is stated that a key objective of testing is to verify that the test object meets regulatory requirements. This is crucial as compliance with regulatory standards ensures that the software adheres to necessary laws, guidelines, and safety standards which are often mandatory in various industries such as healthcare, finance, and aviation. Ensuring regulatory compliance helps prevent legal issues and promotes user safety and trust.

White-box testing involves testing the internal structures or workings of an application, as opposed to the functionality exposed to the end user. Experience-based testing, such as exploratory testing, involves testers using their knowledge, experience, and intuition to test the system without predefined test cases, often focusing on the input-output behavior of the system.

Comprehensive and Detailed Explanation From Exact Extract:

This question applies theState Transition Testingtechnique.

Let’s evaluateOption Dstep-by-step:

NORMAL MODE → DEGRADED MODE:✅Valid on“FAILURE DETECTED”

DEGRADED MODE → NORMAL MODE:✅Valid on“ALL FAILURES CLEARED”

NORMAL MODE → DIAGNOSTIC MODE:✅Valid on“SELF DIAGNOSTIC INITIATED”

DIAGNOSTIC MODE → DEGRADED MODE:❌Invalid– there isno defined transitionfrom DIAGNOSTIC MODE directly to DEGRADED MODE.

According to the state diagram, DEGRADED MODE can only be entered:

From NORMAL MODE (on FAILURE DETECTED), or

Not from DIAGNOSTIC MODE at all.

This violates the rule:

“State transition testing uses a model where test cases are designed to execute valid and invalid transitions.”

(ISTQB CTFL Syllabus v4.0, Section 4.2.4 – State Transition Testing, Page 40)

Thus, OptionDcontains aninvalid transition, making it the correct answer.

Business, development, and testing (C)are the three key perspectives inagile user story refinement:

Business (Product Owner, Stakeholders)– Ensures the story aligns with user needs and business goals.

Development (Developers)– Provides insights on feasibility and technical constraints.

Testing (Testers, QA)– Ensures testability, acceptance criteria, and risk identification.

(A) is incorrectbecause the product owner is part of business stakeholders.

(B) is incorrectbecause architecture is part of development, but not the primary driver of user stories.

(D) is incorrectbecauseacceptance testing is a process, not a stakeholder group.

Across-functional team collaborationensureswell-defined, testable, and feasibleuser stories.

Debugging activities typically include reproducing the failure, diagnosing the root cause, and fixing the cause of the failure. Adding new test cases, while important in the overall testing process, is not a direct part of debugging. Debugging focuses on understanding and correcting the issue that caused the failure, rather than expanding the test suite.

In the given decision table, Column 7 represents the following conditions and actions:

The patient is over 18 years old: True

The patient is allergic to Penicillin: True

The patient is taking anticoagulant therapy: True

When analyzing this column:

If the patient is over 18 years old, allergic to Penicillin, and taking anticoagulant therapy, the decision table suggests consultation with a hematologist and prescribing half of the full recommended dosage for 10 days.

This column does not represent an impossible situation based on the conditions provided. However, upon deeper inspection and understanding of medical practices, it can be argued that such a specificcombination of conditions could be highly unlikely, making it appear unnecessary or an edge case that might be considered for deletion.

Given the constraints of the conditions and the requirements of the decision table, the provided answer needs to be verified against real-world medical guidelines to confirm if this scenario is indeed impossible or just

Exploratory testing is characterized by its reliance on the skills and experience of the tester. The effectiveness of exploratory testing depends heavily on the tester's ability to design and execute tests basedon their intuition and knowledge of the application. This type of testing is often performed without predefined test cases, making the individual tester's expertise crucial.

TheAgile Testing Quadrantsframework categorizes tests based on theirpurpose and audience:

Quadrant 1 (Q1): Technology-facing tests (unit and component tests).

Quadrant 2 (Q2): Business-facing tests supporting development (e.g., BDD tests).

Quadrant 3 (Q3):Business-facing tests that critique the system (B).

Includesusability testing, exploratory testing, and UATto ensure software meets user expectations.

Quadrant 4 (Q4): Technology-facing tests that critique the system (e.g., performance, security testing).

Option B correctly defines Q3since it focuses onevaluating the user experience, exploring the system, and validating business expectations.

Maintenance testing is performed to ensure that the application continues to function correctly after changes have been made. These changes can include modifications due to new regulations, bug fixes, enhancements, or any other updates. In this case, the change in the protocol for connecting to the payment gateway due to new regulations falls under maintenance testing, as itinvolves testing the application to ensure it works correctly after the implementation of the required changes​​.

Top of Form

Bottom of Form

This answer is correct because code-related white-box test techniques are test design techniques that use the structure of the code to derive test cases. They provide an objective measure of coverage, such as statement coverage, branch coverage, or path coverage, which indicate how much of the code has been exercised by the test cases. Code-related white-box test techniques can be used to complement black-box test techniques, which are test design techniques that use the functional or non-functional requirements of the system or component to derive test cases. By combining both types of techniques, testers can increase their confidence in the code and find more defects. References: ISTQB Glossary of Testing Terms v4.0, ISTQB Foundation Level Syllabus v4.0, Section 2.3.2.2

Test-Driven Development (TDD) includes refactoring as a key practice. After writing tests and the code to satisfy those tests, refactoring is performed to improve the code and test quality without changing the functionality. This continuous process helps maintain clean, efficient, and manageable code.

This answer is correct because error guessing is a test design technique where the experience and intuition of the tester are used to anticipate where errors, defects and failures have occurred or are likely to occur, and to design test cases to expose them. Error guessing can be based on factors such as the complexity of the system or component, the known or suspected weaknesses of the system or component, the previous history of defects, or the common types of errors in the domain or technology. Error guessing can be used as a complementary technique to other more systematic or formal techniques, or when there is insufficient information or time to apply them. References: ISTQB Glossary of Testing Terms v4.0, ISTQB Foundation Level Syllabus v4.0, Section 2.3.2.5

Option D correctly explains what is represented by the lines A, B and the axes X, Y in a testing metrics chart. According to option D:

X-axis represents Time

Y-axis represents Count

Line A represents Number of open bugs

Line B represents Total number of executed tests

This information is essential in understanding and analyzing the testing metrics of a completed project.

In the ISTQB terminology:

A defect (also known as a bug or fault) is an issue in the code that can cause a failure.

A failure is the observable incorrect behavior or output of the software due to a defect.

In this scenario, the memory leak is the defect in the application code that causes the application not to release dynamically allocated memory properly. The observable effect of this defect, which is the slowdown in response time, is considered a failure because it is the manifestation of the defect that prevents the application from meeting its performance requirements.

According to the ISTQB Glossary of Testing Terms, Version 4.0, 2018, page 18, a failure is “an event in which a component or system does not perform a required function within specified limits”. In this case, the calculator software does not perform the required function of calculating the correct result for 5+6 within the specified limits of accuracy and precision. Therefore, this is an example of a failure.

The other options are incorrect because:

A mistake is “a human action that produces an incorrect result” (page 25). A mistake is not an event, but an action, and it may or may not lead to a failure. For example, a mistake could be a typo in the code, a wrong assumption in the design, or a misunderstanding of the requirement.

A fault is “a defect in a component or system that can cause the component or system to fail to perform its required function” (page 16). A fault is not an event, but a defect, and it may or may not cause a failure. For example, a fault could be a logical error in the code, a missing specification in the design, or a contradiction in the requirement.

An error is “the difference between a computed, observed, or measured value or condition and the true, specified, or theoretically correct value or condition” (page 15). An error is not an event, but a difference, and it may or may not result in a failure. For example, an error could be a rounding error in the calculation, a measurement error in the observation, or a deviation error in the condition.

References = ISTQB Glossary of Testing Terms, Version 4.0, 2018, pages 15-18, 25; ISTQB CTFL 4.0 - Sample Exam - Answers, Version 1.1, 2023, Question 96, page 34.

Cost can be regarded as an exit criterion for testing, because it is a factor that affects the profitability and feasibility of the software product. Testing is an investment that aims to improve the quality and reliability of the software product, but it also consumes resources, such as time, money, and human effort. Therefore, testing should be planned and executed in a way that balances the cost and benefit of testing activities. Having cost as an exit criterion helps to avoid spending too much money on testing, which may result in an unprofitable product or a loss of competitive advantage. Cost can also help to prioritize and focus the testing efforts on the most critical and valuable features and functions of the software product. However, cost should not be the only exit criterion for testing, as it may not reflect the true quality and risk level of the software product. Other exit criteria, such as defect rate, test coverage, user satisfaction, etc., should also be considered and defined in the test plan.

The other options are incorrect, because they either deny the importance of cost as an exit criterion, or they make false or unrealistic assumptions about the cost of testing. Option B is incorrect, because the financial value of product quality can be estimated, for example, by using cost-benefit analysis, return on investment, or cost of quality models. Option C is incorrect, because going by cost as an exit criterion does not necessarily constrain the testing project or help achieve the desired quality level. Cost is a relative and variable factor that depends on the scope, complexity, and context of the software product and the testing project. Option D is incorrect, because the cost of testing can be measured effectively, for example, by using metrics, such as test effort, test resources, test tools, test environment, etc.

The testing quadrants, as defined in the context of agile testing, help categorize different types of tests based on their goals and who they serve.

Q1:Technology-facing tests that support the team (e.g., unit tests).

Q2:Business-facing tests that support the team (e.g., automated acceptance tests, BDD, ATDD).

Q3:Business-facing tests that critique the product (e.g., exploratory testing).

Q4:Technology-facing tests that critique the product (e.g., performance and load tests).

Option B correctly places automated acceptance tests from BDD and ATDD in quadrant Q2.

Traceability is an essential aspect of software testing that ensures each test case can be traced back to its corresponding test basis items, such as requirements, design documents, or user stories. This linkage helps in determining which test basis items have been covered by executed test cases, identifying theimpact of changes, and maintaining overall test documentation. However, the statement that traceability enables experience-based test techniques to be applied is false, as experience-based test techniques, such as exploratory testing, rely on the tester's skills and experience rather than documented traceability.

Independent of the software development lifecycle followed, it is a good practice to ensure that each test level (e.g., unit testing, integration testing, system testing) has clear and appropriate objectives. This ensures that the testing is focused and effective at each level. Other options either contradict good practices or are not applicable across all lifecycle models.

Product risksare risks thatimpact the quality or functionality of the software, whereasproject risksaffect theprocess, resources, or timeline.

(A) is correctbecause incorrect calculations impact software correctness.

(B), (C), and (D) are project risksas they relate toteam coordination, staffing, and schedulingrather than software defects.

Identifyingproduct risksearlyimproves defect detection and ensures better coverage for high-risk areas.

Comprehensive and Detailed Explanation From Exact Extract:

“Confirmation testing confirms that an original defect has been successfully fixed… Regression testing confirms that no adverse consequences have been caused by a change… These adverse consequences could affect the same component where the change was made, other components in the same system, or even other connected systems.”

(ISTQB CTFL Syllabus v4.0, Section 2.2.3 – Confirmation Testing and Regression Testing, Page 30)

When deciding on the order of test execution based on priorities and dependencies, the correct sequence should consider both the priority levels and any dependencies between test cases. Here’s the analysis:

Test Bhas the highest priority (1) and depends onTest D.

Test Dshould be executed beforeTest B.

Test Chas a medium priority (2) and depends onTest A.

Test Acan be executed at any time since it has no dependencies.

Considering these dependencies and priorities,Test Dshould be executed first, followed byTest B. After that,Test Aand finallyTest C. Therefore, the correct sequence isD-B-A-C​​.

Scenario-oriented acceptance criteria describe how a system should behave in a specific situation or scenario. These criteria are typically written from the end-user's perspective and focus on user interactions and system responses. Option D fits this description as it outlines a specific scenariowhere a user is already logged in and describes the expected behavior when the user navigates to a particular page, which is to show the report of the last test run. This type of criterion ensures that the system meets user expectations in that scenario​​.

Non-functional testing includes testing of both technical and non-technical quality characteristics. Non-functional testing is the process of testing the quality attributes of a system, such as performance, usability, security, reliability, etc. Non-functional testing can be applied at any test level and can use both black-box and white-box test techniques. Non-functional testing can cover both technical aspects, such as response time, throughput, resource consumption, etc., and non-technical aspects, such as user satisfaction, accessibility, compliance, etc. Therefore, option B is the correct answer.

DevOps practices emphasize the importance of testing non-functional characteristics such as performance, security, and reliability. This focus ensures that the system not only meets functional requirements but also performs well under various conditions and is secure. DevOps promotes a continuoustesting approach, which includes both functional and non-functional testing integrated into the development and deployment pipelines.

Static analysis tools are software tools that examine the source code of a program without executing it. They can detect various types of issues, such as syntax errors, coding standardsviolations, security vulnerabilities, and potential bugs12. However, static analysis tools cannot identify issues that depend on the runtime behavior or performance of the program, such as very low MTBF (Mean Time Between failure)3. MTBF is a measure of the reliability of a system or component. It is calculated by dividing the total operating time by the number of failures. MTBF reflects how often a system or component fails during its expected lifetime. Static analysis tools cannot measure MTBF because they do not run the program or observe its failures. MTBF can only be estimated by dynamic testing, which involves executing the program under various conditions and collecting data on its failures4. Therefore, very low MTBF is an issue that cannot be identified by static analysis tools. The other options, such as potentially endless loops, referencing a variable with an undefined value, and security vulnerabilities, are issues that can be identified by static analysis tools. Static analysis tools can detect potentially endless loops by analyzing the control flow and data flow of the program and checking for conditions that may never become false5. Static analysis tools can detect referencing a variable with an undefined value by checking the scope and initialization of variables and reporting any use of uninitialized variables6. Static analysis tools can detect security vulnerabilities by checking for common patterns of insecure code, such as buffer overflows, SQL injections, cross-site scripting, and weak encryption. References = What Is Static Analysis? Static Code Analysis Tools - Perforce Software, How Static Code Analysis Works | Perforce, Static Code Analysis: Techniques, Top 5 Benefits & 3 Challenges, What is MTBF? Mean Time Between Failures Explained | Perforce, Static analysis tools - Software Testing MCQs - CareerRide, ISTQB_Chapter3 | Quizizz, [Static Code Analysis for Security Vulnerabilities | Perforce].

In Agile estimation sessions, particularly during Planning Poker, the goal is to reach a consensus on the effort required for a user story. The process encourages discussion and collaboration among team members to understand the story's requirements and complexities fully. Here’s a breakdown of the options and why D is the correct choice:

Option A:Calculating the arithmetic mean of all estimates.

This method is straightforward but does not facilitate team discussion or consensus-building. It merely averages out the estimates without addressing the reasons behind the varying estimates. Thus, important insights and understanding of the task complexity might be missed.

Option B:Selecting the most frequent estimate value.

While this approach acknowledges the majority’s opinion, it ignores the minority views, which might highlight significant aspects of the story that need consideration. It doesn't ensure that all perspectives are considered and discussed.

Option C:Calculating the mean of the most optimistic and pessimistic estimates.

This approach considers the extremes but again lacks the team discussion and consensus aspect. It also assumes that the extreme values alone can balance out the estimate, which might not always capture the true complexity or simplicity of the task.

Option D:Discussing the most pessimistic and optimistic estimates.

This approach fosters team collaboration and understanding. Memb4 and Memb6 explain their reasoning for the highest and lowest estimates, respectively, which can reveal different perspectives on the task's complexity. This discussion helps the team align their understanding and often leads to a more accurate and agreed-upon estimate in subsequent rounds.

In conclusion, the main goal of Agile estimation techniques like Planning Poker is to encourage team communication and collaboration to ensure that all aspects of the user story are considered. Option D best aligns with this goal by promoting discussion and consensus.

The features of the test object to be tested and those excluded from the testing represent information that is usually included in a test plan and, in the given test plan, it is more likely to be specified within “Test Scope” rather than in the other two sections mentioned. The test scope defines the boundaries and limitations of the testing activities, such as the test items, the features to be tested, the features not to be tested, the test objectives, the test environment, the test resources, the test assumptions, the test risks, etc. The test scope helps to establish a common understanding of what is included and excluded from the testing, and to avoid ambiguity, confusion, or misunderstanding among the stakeholders. The other two sections, “Testing Communication” and “Stakeholders”, are also important parts of a test plan, but they donot directly address the features of the test object. The testing communication describes the methods, frequency, and responsibilities for the communication and reporting of the testing progress, status, issues, and results. The stakeholders identify the roles and responsibilities of the people involved in or affected by the testing activities, such as the test manager, the test team, the project manager, the developers, the customers, the users, etc. References: ISTQB Certified Tester Foundation Level (CTFL) v4.0 sources and documents:

ISTQB® Certified Tester Foundation Level Syllabus v4.0, Chapter 2.1.1, Test Planning1

ISTQB® Glossary of Testing Terms v4.0, Test Plan, Test Scope2

According to the description provided, when both systems A and B come back up at the same time, the process should involve a decision about which system should become active. However, the description states that if both systems come up simultaneously, one should become active based on a specific condition or precedence. Generally, in disaster recovery systems, there are protocols to avoid both systems becoming active simultaneously to prevent conflicts. Therefore, the transition where both A and B come back up at the same time and A becomes active while B becomes inactive without any conflict or decision-making step is incorrect​​.

Configuration management (B)ensures thatversions of software and test artifactsare properly tracked, stored, and retrievable. It allows teams to:

Restoreearlier versions of software and test work products

Maintaintraceability between requirements, tests, and code

Avoid discrepancies due tomismanaged versions

(A) is incorrectbecause defect managementtracks issues but does not restore versions.

(C) is incorrectbecause change managementcontrols changes but does not track past versions.

(D) is incorrectbecause risk managementassesses risks but does not manage software versions.

Effective configuration management ensures the ability to roll back changesand maintain system stability.

This answer is correct because static testing and dynamic testing are both types of testing that can be used to highlight issues associated with non-functional characteristics, such as usability, performance, security, reliability, etc. Static testing is a type of testing that involves the analysis of software work products, such as requirements, design, code, or test cases, without executing them. Dynamic testing is a type of testing that involves the execution of software work products, such as code or test cases, using inputs and verifying outputs. Both static testing anddynamic testing can be applied to different test levels and test types, and can use different test techniques and tools, to evaluate the non-functional characteristics of the software product. References: ISTQB Glossary of Testing Terms v4.0, ISTQB Foundation Level Syllabus v4.0, Section 2.2.1.1, Section 2.2.1.2

This answer is correct because the test procedures of all test cases that have been executed are not a typical content of a test completion report for a test project. A test completion report is a document that summarizes the test activities and results at the end of a test project. It usually includes information such as the test objectives, scope, approach, resources, schedule, results, deviations, issues, risks, lessons learned, and recommendations for improvement. The test procedures of all test cases that have been executed are part of the test documentation, but they are not relevant for the test completion report, as they do not provide a high-level overview of the test project outcomes and performance. References: ISTQB Foundation Level Syllabus v4.0, Section 2.5.3.2

A product risk is a risk that affects the quality or timeliness of the software product being developed or tested1. Product risks are related to the requirements, design, implementation, verification, and maintenance of the software product2.

The risk of the sub-contractor failing to meet his commitment is a product risk, as it could cause a delay in the completion of the testing required for the current cycle, which in turn could affect the release date of the product. The release date is an important aspect of the product quality, as it reflects the customer satisfaction and the market competitiveness of the product3.

The other options are not correct because:

A. It is not true that any risk associated with development timeline is a product risk. Some risks could be project risks, which are risks that affect the management or control of the software project, such as budget, resources, schedule, or communication1. For example, a risk of losing a key project stakeholder is a project risk, not a product risk.

B. It is not true that the risk is no longer a risk for the Test Manager since an independent party is managing it. The Test Manager is still responsible for ensuring that the testing activities are completed according to the test plan and the quality objectives4. The Test Manager should monitor and control the sub-contractor’s performance and communicate with him regularly to identify and mitigate any potential issues or deviations5.

C. It is not clear what is meant by “object” in this option, but it could be interpreted as the software system under test or the test object6. In any case, the risk is not an object risk, as it does not affect the successful completion of the object, but rather the successful completion of the testing of the object. An object risk could be a risk that affects the functionality, reliability, usability, efficiency, maintainability, or portability of the software system under test2. For example, a risk of the software system having a high complexity or a low testability is an object risk, not a product risk.

References =

1 ISTQB® Certified Tester Foundation Level Syllabus v4.0, 2023, p. 97

2 ISTQB® Certified Tester Foundation Level Syllabus v4.0, 2023, p. 98

3 ISTQB® Certified Tester Foundation Level Syllabus v4.0, 2023, p. 99

4 ISTQB® Certified Tester Foundation Level Syllabus v4.0, 2023, p. 100

5 ISTQB® Certified Tester Foundation Level Syllabus v4.0, 2023, p. 101

6 ISTQB® Certified Tester Foundation Level Syllabus v4.0, 2023, p. 102

According to the decision table in the image, a Preferred Guest Card holder with a Silver room is eligible for an upgrade to Gold Luxury (YES), while a non-Preferred Guest Card holder, regardless of room type, is not eligible for any upgrade (NO). Therefore, Customer A (a Preferred Guest Card holder with a Silver room) would be offered an upgrade to Gold Luxury, and Customer B (a non-Preferred Guest Card holder with a Platinum room) would not be offered anyupgrade. References = The answer is derived directly from the decision table provided in the image; specific ISTQB Certified Tester Foundation Level (CTFL) v4.0 documents are not referenced.

The question is about marking the correct sentences among the given statements related to defects, failures, and mistakes. According to the ISTQB glossary, the definitions of these terms are1:

Defect: A flaw in a component or system that can cause the component or system to fail to perform its required function, e.g. an incorrect statement or data definition. A defect, if encountered during execution, may cause a failure of the component or system.

Failure: An event in which a component or system does not perform a required function within specified limits.

Mistake: A human action that produces an incorrect result.

Therefore, out of the five given statements, only two are correct, namely:

A human mistake may produce a defect: This is true, as a mistake is a source or cause of a defect, e.g. a programmer may make a mistake in writing a code statement, which results in a defect in the software component.

When a defect exists in a system it may result in a failure: This is true, as a defect is a potential or actual cause of a failure, e.g. a defect in the software component may cause the system to fail to perform a required function when the defect is encountered during execution.

The other three statements are incorrect, namely:

Defects are a result of environmental conditions and are also referred to as “Failures”: This is false, as defects are not a result of environmental conditions, but of mistakes or other factors, and defects are not the same as failures, but rather the causes of failures.

A system will totally fail to operate correctly when a failure exists in it: This is false, as a system may not necessarily fail completely or stop operating when a failure occurs, but may continue to operate with reduced functionality or performance, or with incorrect results.

Defects occur only as a result of technology changes: This is false, as defects can occur due to various reasons, not only technology changes, such as human mistakes, design flaws, requirement changes, hardware failures, etc.

The best example of a test case for this user story should cover the acceptance criteria comprehensively. Option A addresses the critical aspects of the acceptance criteria:

Verifying the discount for the first timeslot (8 AM GMT) - ensuring it provides a 10% discount.

Verifying that changing the time slot removes the discount - ensuring the discount logic is correctly applied.

This test case effectively validates the functionality related to both the discount and the ability to change time slots, which are key parts of the user story's requirements​​.

Planning poker is a consensus-based estimation technique used in Agile. It involves team members selecting cards with their estimate for a user story, then discussing the differences in estimates.

Option A:Incorrect. While three-point estimation is valid, planning poker focuses on team consensus rather than individual estimation techniques.

Option B:Incorrect. The goal of planning poker is not to force unanimity but to reach a reasonable consensus.

Option C:Incorrect. Averaging estimates is not how planning poker works.

Option D:Correct. The members with the highest and lowest estimates discuss their reasoning to foster understanding and adjust estimates accordingly in subsequent rounds.

Comprehensive and Detailed Explanation From Exact Extract:

Theshift-left approachfocuses on executing testing activitiesas early as possiblein the software development lifecycle, including static testing, unit tests, and early reviews. Activities like writing tests before code (test-first) and continuous integration are central to this principle.

However, performingnon-functional testing at the system test levelhappenslaterin the lifecycle and doesnotalign with the shift-left philosophy.

“The shift-left approach involves the adoption of practices to move tasks related to testing (e.g., reviews, test design) to earlier stages in the lifecycle.”

(ISTQB CTFL v4.0 Syllabus, Section 2.1.5 – Shift-Left Approach)

“Non-functional testing is often performed at the system test level, but the shift-left approach aims to begin such testing earlier, possibly at integration or even unit levels.”

(ISTQB CTFL v4.0 Syllabus, Section 2.2.2 – Test Types)

Therefore,Option Ddoes not correspond to shift-left practices and is the correct answer.

The correct tool forcreating test cases, test data, and test proceduresis atest design and implementation tool (A).

(B) is incorrectas static testing tools focus oncode analysis, not test case creation.

(C) is incorrectbecause DevOps tools manageautomation pipelines, not test design.

(D) is incorrectbecause test execution tools focus onrunning tests rather than designing them.

Test design tools helpoptimize test coverage, reduce redundancy, and improve efficiency.

Exhaustive testing (testing all input combinations) is practically impossible except in trivial cases (C). Instead, testers focus on risk-based, prioritized, and efficient test techniques. The seven principles of testing in the ISTQB syllabus highlight that exhaustive testing is infeasible, and therefore, techniques such as equivalence partitioning, boundary value analysis, and risk-based testing are used to optimize test coverage.

To reproduce a defect easily, the defect report should include detailed steps that clearly describe how to encounter the issue. This includes the specific actions taken, the expected result, and the actual result observed. In the given defect report, it is not clear if the issue occurs for any scheduled exam or if it is user-specific. Providing exact steps helps developers and testers replicate the issue and understand its context better, leading to quicker and more effective resolution​​.

This answer is correct because a typical objective of testing is to ensure that a software has been tested using a combination of test techniques, such as black-box, white-box, or experience-based techniques, that are appropriate for the test objectives, test levels, and test types. Testing using a combination of test techniques can increase the effectiveness and efficiency of testing, as different techniques can target different aspects of the software quality, such as functionality, usability, performance, security, reliability, etc. Testing using a combination of test techniques can also reduce the risk of missing defects that could be detected by one technique but not by another. References: ISTQB Foundation Level Syllabus v4.0, Section 2.3.1.1, Section 2.3.2

Based on the given user story and acceptance criteria, the ATDD (Acceptance Test-Driven Development) approach focuses on defining acceptance tests before development begins. The first test written typically covers the "happy path" or the most straightforward scenario to ensure the primary functionality works as expected.

The registration form must be filled with valid values.

The user must accept terms and conditions.

An email with a confirmation link must be sent after submission.

Given Acceptance Criteria:The most likely first ATDD test would ensure that a new user can successfully register by filling in all fields with valid data and confirming the registration through an email link. This ensures that the basic and most crucial functionality of the registration feature is working correctly before handling edge cases or error conditions.

Static testing involves reviewing the code, requirements, and design documents without executing the code. It is effective in finding certain types of bugs that do not require the code to be run. One common example of such a bug is variables that are declared but not initialized. These issues can be detected through code inspections or static analysis tools, which can identify uninitialized variables, missing declarations, and other coding standard violations without the need to execute the code​​.

The correct outcome of a two-value boundary value analysis applied to the password length is the set of test cases represented by option D. Boundary value analysis is a test design technique that focuses on the values at the boundaries of an equivalence partition, such as the minimum and maximum values, or the values just above and below the boundaries. A two-value boundary value analysis uses two values for each boundary, one representing the valid value and one representing the invalid value. For example, if the valid range of values is from 4 to 7, then the two values for the lower boundary are 3 and 4, and the two values for the upper boundary are 7 and 8. The test cases in option D use these values for the password length, while also satisfying the other requirements of the password, such as containing at least one numeric character, one capital letter, and one lowercase letter. The test cases in option D are:

1RhT: a 4-character password that is valid

rSp53: a 5-character password that is valid

3N3e10: a 6-character password that is valid

8sBdby: an 8-character password that is invalid The test cases in the other options are incorrect, because they either use values that are not at the boundaries of the password length, or they do not meet the other requirements of the password. For example, the test cases in option A are:

1xA: a 3-character password that is invalid, but it does not contain a capital letter

aB11: a 4-character password that is valid

Pq1ZZab: a 7-character password that is valid

7iDD0a1x: an 8-character password that is invalid References: ISTQB Certified Tester Foundation Level (CTFL) v4.0 sources and documents:

ISTQB® Certified Tester Foundation Level Syllabus v4.0, Chapter 2.2.1, Black-box Test Design Techniques1

ISTQB® Glossary of Testing Terms v4.0, Boundary Value Analysis, Equivalence Partition2

ATDD stands for Acceptance Test-Driven Development, which is a collaborative approach to software development and testing, in which the acceptance criteria of a user story are defined and automated as executable tests before the implementation of the software system. ATDD tests are usually written in a Given-When-Then format, which describes the preconditions, the actions, and the expected outcomes of a test scenario. ATDD tests are intended to verify that the software system meets the expectations and the needs of the users and the stakeholders, as well as to provide feedback and guidance for the developers and the testers. Based on the given information, the ATDD test that is most likely to be written first is the one that corresponds to option B, which is:

Given the logged-in user is on the Change Password page When the user enters the correct current password, enters a valid new password (different from the last 5 passwords), and presses the Change Password button Then the user receives an email confirming that the password has been successfully changed

This ATDD test is most likely to be written first, because it covers the main functionality and the happy path of the user story, as well as the most important acceptance criterion [a]. It also verifies that the user can change the password with a valid new password that meets the criteria related to the length, the type of characters, and the history of the passwords, as specified in the acceptance criterion [c]. The other options are not likely to be written first, because they either cover less critical or less frequent scenarios, such as entering a wrong current password [d] or an invalid new password [e], or they are not related to the user story or the acceptance criteria at all, such as submitting a purchase order [d]. References: ISTQB Certified Tester Foundation Level (CTFL) v4.0 sources and documents:

ISTQB® Certified Tester Foundation Level Syllabus v4.0, Chapter 1.3.1, Testing in Software Development Lifecycles1

ISTQB® Glossary of Testing Terms v4.0, Acceptance Test-Driven Development, User Story, Acceptance Criterion, Given-When-Then2

Both black-box test techniques and experience-based test techniques can be applied to functional and non-functional testing. Functional testing focuses on what the system does, while non-functional testing examines how the system performs. These techniques provide flexible and effective methods for assessing various aspects of the system.

This answer is correct because the whole-team approach is a way of working in agile projects where all team members share the responsibility for the quality of the product, and collaborate on delivering value to the customer. The whole-team approach involves testers, developers, business analysts, product owners, and other stakeholders in planning, designing, developing, testing, and delivering the product. The whole-team approach fosters communication, feedback, learning, and continuous improvement within the team. References: ISTQB Glossary of Testing Terms v4.0, ISTQB Foundation Level Syllabus v4.0, Section 3.1.1.1

The "whole team approach" in Agile methodologies emphasizes collaboration and communication among all team members, including developers, testers, and business representatives. This approach fosters better relationships and effective collaboration, which ultimately benefits the project by leveraging diverse skills and perspectives. It helps ensure that everyone is aligned with the project's goals and quality standards, thus improving the overall effectiveness and efficiency of the team.

 Product Risks:Relate to the quality of the software product itself, such as functionality, performance, security, and user experience.

II:A session management issue affects the product's security and functionality.

IV:Inability to maintain operation and data corruption directly affects the product's reliability and data integrity.

 Project Risks:Relate to the circumstances and activities within the project, such as schedule, resources, and planning.

I:Poor hardware equipment for performance testing impacts the project's ability to conduct performance tests.

III:Inadequate requirement specifications affect the project timeline and the ability to design tests.

Static analysis is the process of examining the work products of a software development or testing activity without executing them. Static analysis can be applied to various types of work products, such as requirements, design, code, test cases, etc. However, test plans are not suitable for static analysis, because they are high-level documents that describe the test objectives, scope, strategy, resources, schedule, and risks of a testing project. Test plans are not executable or formalized in a way that static analysis tools can analyze them. Therefore, option A is the correct answer.