CTFL-v4 Practice Test 2 — 25 Questions

Question 1

A tester is designing test cases for a library management system. The system calculates fines for overdue books based on the number of days late and the borrower type (student or faculty). For students, the fine is $0.25 per day; for faculty, it is $0.50 per day. The system also waives fines if the book is returned within 3 days. Which test design technique would be most effective to systematically cover combinations of borrower type, days late, and waiver condition?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Decision table testing. Decision table testing is the best fit because the fine calculation depends on a combination of conditions: borrower type, days late, and whether the waiver applies. A decision table systematically lists all combinations of these conditions and the corresponding actions, ensuring comprehensive coverage of the business rules. This technique is specifically designed for complex logical rules and helps identify gaps or contradictions in requirements.

Answer

Boundary value analysis

Answer

State transition testing

Answer

Equivalence partitioning

Question 2

Which of the following describes the 'Monitoring' aspect of test management?

Accepted Answer

Gathering data on test execution progress and comparing it to the plan.. Monitoring is the process of continuously tracking the current status of the project against the initial plan. It involves gathering metrics and comparing them to expected progress. This allows the manager to identify deviations early and provide transparency to stakeholders, ensuring that everyone has an accurate understanding of the testing progress and any potential risks to the project's schedule or quality.

Answer

Taking corrective actions when progress is slower than planned.

Answer

Writing the final test summary report for the project.

Answer

Designing the test cases based on the system requirements.

Question 3

Which TWO of the following are valid reasons for performing maintenance testing?

Accepted Answer

To verify that a bug fix has been successfully implemented.. Maintenance testing is performed when an existing system is modified, migrated, or retired. Even minor changes, like a configuration update or a library patch, can introduce unintended regressions. By performing maintenance testing, organizations ensure that the new changes don't break existing features and that the system continues to perform reliably in its production environment after modifications have been applied.

Answer

To replace all existing test cases with new ones.

Answer

To prevent the need for any future updates.

Answer

To eliminate the need for documentation updates.

Question 4

During project monitoring, the test manager realizes the team is falling behind the schedule due to an unexpectedly high number of defects. What is the most effective management response?

Accepted Answer

Reduce the scope of testing by focusing only on high-risk areas.. A proactive response involves re-assessing risks and adjusting priorities. By shifting focus to high-risk areas, the test manager ensures that even if the schedule is tight, the most critical features are verified. This approach aligns with the ISTQB focus on risk-based testing, where resources are allocated based on potential impact rather than simply trying to execute every test case without consideration of project value.

Answer

Demand the team work unpaid overtime to complete the original plan.

Answer

Ignore the defects and continue with the original testing sequence.

Answer

Replace the test team with more experienced external consultants.

Question 5

In the context of the 'Test-First' approach, how does the developer's role change regarding testing?

Accepted Answer

The developer writes tests to define functionality before writing the code.. In a Test-First approach (like TDD), the developer writes the test case before writing the corresponding application code. This forces the developer to understand the requirements and the expected behavior of the code before implementation begins. This practice leads to cleaner, more modular code design and ensures that every piece of functionality has a verified, automated test case from the very beginning of the development cycle.

Answer

The developer no longer needs to perform debugging.

Answer

The developer delegates all testing responsibilities to the QA team.

Answer

The developer waits for a test plan to be approved by the test manager.

Question 6

Which document is primarily used by the test manager to define the scope, approach, resources, and schedule of the testing activities?

Accepted Answer

Test Plan.. The Test Plan is the central document for test management. It outlines the 'what', 'how', 'when', and 'who' of the testing process. According to ISTQB, the test plan acts as the roadmap for the entire testing effort, ensuring that all stakeholders are aligned on the testing strategy, resource availability, and the timeline for completion of all planned testing activities.

Answer

Test Case Specification.

Answer

Defect Report.

Answer

Requirement Traceability Matrix.

Question 7

A project manager argues that testing is too expensive and suggests skipping the test planning phase to start coding immediately. Which ISTQB principle best counters this argument?

Accepted Answer

Early testing reduces the cost of fixing defects found later in the lifecycle.. Testing is most cost-effective when planned early. The 'early testing' principle states that testing activities should begin as soon as possible. Skipping planning leads to reactive, disorganized testing that misses critical defects, ultimately costing far more to fix after release. By planning, testers prioritize high-risk areas, ensuring that resources are focused on the parts of the system most likely to fail, thereby maximizing the return on investment for testing efforts.

Answer

Defect clustering suggests that testing is only needed for one module.

Answer

Testing is context-dependent, so planning is unnecessary for small projects.

Answer

Exhaustive testing is impossible, so planning only wastes time.

Question 8

Which type of tool would best assist a tester in checking for memory leaks and resource usage during the execution of a software application?

Accepted Answer

Dynamic analysis tool.. Dynamic analysis tools are essential for monitoring an application while it is running. Unlike static tools, they detect issues like memory leaks, buffer overflows, and performance bottlenecks that occur only during execution. Using these tools early in the lifecycle helps developers identify and fix critical performance defects, preventing costly issues from reaching production and ensuring that the final application is stable, efficient, and resource-conscious under actual usage conditions.

Answer

Configuration management tool.

Answer

Static analysis tool.

Answer

Test design tool.

Question 9

Which of the following describes the 'Testing' activity in the context of the V-model?

Accepted Answer

Testing activities correspond to specific development phases, starting at the requirements level.. The V-model emphasizes the relationship between each development phase and a corresponding testing phase. In this model, testing is not just a final stage; it is a parallel activity that starts with planning and design. This ensures that every development requirement has a corresponding verification method, providing a structured approach to quality assurance throughout the entire SDLC.

Answer

Testing is a distinct phase that occurs only after the final system integration.

Answer

Testing is used solely for defect detection at the very end of the development process.

Answer

Testing consists only of the execution of automated scripts against the finished code.

Question 10

Which category of test tools is primarily used to generate test data to be used by the application under test?

Accepted Answer

Test data preparation tools.. Test data preparation tools are designed to automate the creation, masking, and provisioning of data needed for testing. This is critical because manual data creation is time-consuming and prone to errors. By automating this, testers ensure consistent and representative data sets, which are essential for reliable test results and avoiding biases in performance or functional verification, thus increasing the overall quality and efficiency of the testing process.

Answer

Test execution tools.

Answer

Test design tools.

Answer

Test management tools.

Question 11

Which TWO of the following statements accurately describe the role of the 'Moderator' in a formal inspection process?

Accepted Answer

The moderator ensures the inspection meeting is conducted efficiently.. The moderator holds the primary responsibility for the success of the inspection. By managing the meeting and ensuring the process is followed, they shield the author from direct conflict and ensure participants focus on defect discovery rather than debating solutions. This separation of duties is vital for maintaining an objective, constructive, and efficient review environment, which is the cornerstone of successful formal static testing.

Answer

The moderator acts as the lead author to explain complex sections.

Answer

The moderator is responsible for fixing all identified defects.

Answer

The moderator must have the final sign-off authority for the project.

Question 12

Which of the following activities best demonstrates the ISTQB principle of 'Testing provides early feedback'?

Accepted Answer

Reviewing user stories and acceptance criteria during the sprint planning session.. Early feedback is the core of shift-left testing. By performing static testing on documents like requirements or design specifications, testers identify defects before a single line of code is written. This is more efficient and cost-effective than finding defects during dynamic testing, as it prevents the cost of rework and ensures that quality is built into the product from the very start of development.

Answer

Executing automated regression tests at the end of each daily build.

Answer

Conducting a performance test on the integrated system before the final release.

Answer

Reporting defects found during the User Acceptance Testing (UAT) phase.

Question 13

Which approach is most appropriate for maintaining quality when a project uses a DevOps culture with continuous deployment?

Accepted Answer

Automated regression tests integrated into the pipeline combined with production monitoring.. In continuous deployment, testing must be highly automated and integrated into the CI/CD pipeline. Shifting testing to the left ensures that code quality is verified at every commit, while monitoring provides the final feedback loop. This combination allows for rapid releases without sacrificing quality, which is the primary objective of DevOps and modern continuous testing practices.

Answer

Manual exploratory testing of every build before it is moved to production.

Answer

Performing formal, document-heavy system testing cycles after every code merge.

Answer

Requiring a separate QA phase where developers are not involved in testing.

Question 14

A project manager is analyzing test progress during a sprint. The team has completed 60% of planned test cases, but 40% of those executed failed due to a critical environment issue. Which test management action is most appropriate?

Accepted Answer

Prioritize and resolve the environment issue before resuming test execution.. The primary focus must be mitigating the blocker rather than continuing execution. By prioritizing environment resolution, the test manager ensures the remaining test cases can be executed in a stable system. This aligns with ISTQB principles of managing test activities by monitoring progress and reacting to deviations that impede the testing process, ensuring the team remains productive and goals are eventually achieved.

Answer

Increase the number of testers to execute remaining cases faster.

Answer

Report the 60% completion rate to stakeholders to indicate success.

Answer

Stop testing immediately and declare the sprint a failure.

Question 15

What is the primary purpose of 'regression testing'?

Accepted Answer

To confirm that changes have not adversely affected existing features.. Regression testing is performed to ensure that new code changes or fixes have not inadvertently introduced or uncovered defects in existing, previously working functionality. As software evolves, it is common for changes in one area to cause failures elsewhere. This testing is crucial in all development lifecycles to maintain system stability and ensure that the quality of the existing product is not compromised by new additions or updates.

Answer

To verify the new functionality is working as expected.

Answer

To test the system against non-functional requirements.

Answer

To perform exhaustive testing of all code paths.

Question 16

Which TWO of the following statements accurately describe the characteristics of a formal review process?

Accepted Answer

Formal reviews follow a documented process with defined roles and entry/exit criteria.. Formal reviews are characterized by a structured process, documented results, and defined roles. They provide a disciplined approach to quality improvement by ensuring that participants follow specific procedures, such as preparation and a review meeting. These characteristics distinguish formal reviews from informal reviews, making them highly effective for ensuring compliance with standards and identifying critical defects in high-risk project artifacts throughout the development cycle.

Answer

Formal reviews must always include the participation of a test manager.

Answer

Formal reviews always require the use of automated static analysis tools.

Answer

Formal reviews are generally faster and cheaper than informal reviews.

Question 17

Refer to the exhibit. A tester is validating this security policy. Which activity represents 'validation'?

Accepted Answer

Testing if the policy effectively prevents unauthorized access.. Validation confirms that the system meets user needs. By checking if the security policy actually protects the user's data and meets business security goals (e.g., does it actually prevent unauthorized access?), the tester is performing validation. This is distinct from verification, which would simply check if the code implements the JSON values as written without considering the broader business impact or the effectiveness of the security controls in a real environment.

Answer

Checking if the code correctly parses the JSON file.

Answer

Verifying that the password length is exactly 12 characters.

Answer

Running a syntax check on the JSON configuration file.

Question 18

Refer to the exhibit. A tester reviews this configuration file during the static testing of a test environment setup. What is the primary risk of this configuration in a formal testing phase?

Accepted Answer

The disabled strict mode may allow invalid data to be processed, masking bugs.. Testing requires stable and representative environments. The 'strict_mode: false' setting allows suboptimal code paths or weak error handling to pass, which should fail in production. Finding this via static testing prevents 'false negatives' where the system appears stable in testing due to permissive settings. Ensuring the test environment configuration mirrors production requirements is a critical aspect of early SDLC validation and risk management.

Answer

The log level set to debug will cause an overflow error in the production database.

Answer

The exponential retry policy will increase the latency of the system during stress testing.

Answer

The environment tag set to 'dev' indicates that the deployment is insecure by design.

Question 19

Which of these is a 'test basis'?

Accepted Answer

Business requirement specifications.. A test basis is the documentation used as the foundation for identifying test conditions. It includes everything from requirements and design documents to business processes and user stories. Without a clear test basis, it is impossible to know what the system is supposed to do, making it impossible to write meaningful test cases. Testers use this basis to trace their tests back to specific requirements to ensure complete coverage.

Answer

The list of identified defects.

Answer

The source code of the application.

Answer

The test execution report.

Question 20

What is the primary difference between verification and validation in the context of testing?

Accepted Answer

Verification checks specifications; validation checks user needs.. Verification asks 'Did we build the system right?' by checking if the software meets the specifications. Validation asks 'Did we build the right system?' by checking if it meets user needs. Both are essential: verification ensures internal consistency and adherence to requirements, while validation ensures the software provides real value to the end user. Combining both ensures the software is both technically sound and fit for its intended business purpose.

Answer

Verification is for developers, validation is for testers.

Answer

Validation is done early; verification is done late.

Answer

Verification is testing; validation is debugging.