CTFL-v4 Testing Throughout the SDLC — Timed 15 Questions

Question 1

In an Agile project, a tester discovers a requirement ambiguity during the sprint planning phase. Which action aligns best with the 'Testing throughout the SDLC' principle?

Accepted Answer

Discuss the requirement with the Product Owner or stakeholder immediately to clarify the intent.. Early testing involves evaluating work products before code is written. By identifying ambiguities during planning, the tester prevents defects from being introduced into the design and implementation phases. This proactive approach saves significant costs compared to finding defects during execution. It emphasizes that testing is not just an execution phase but a continuous process integrated into every stage of the software development lifecycle.

Answer

Document the ambiguity in the defect tracking tool and wait for the developer to fix it.

Answer

Wait until the unit testing phase to verify how the code interprets the ambiguous requirement.

Answer

Proceed with writing test cases based on the tester's own assumption of the requirement.

Question 2

Which TWO of the following statements correctly describe the relationship between testing and the software development lifecycle?

Accepted Answer

Testing should begin as early as possible in the SDLC.. Testing must be integrated early into the SDLC to identify defects as close to their origin as possible, which significantly reduces the cost of fixing them. Regardless of the SDLC model (Waterfall, Agile, or DevOps), the fundamental principles of testing remain the same: early detection, validation against requirements, and continuous quality improvement throughout the entire lifecycle of the software application.

Answer

Testing only occurs after the development phase is finished.

Answer

Testing is an independent phase that is separate from development.

Answer

Testing activities are identical regardless of the SDLC model used.

Question 3

Refer to the exhibit. During the system testing phase, a tester notices the authentication service frequently fails under high load. Based on the provided policy configuration, what is the most appropriate testing action to take next?

Accepted Answer

Conduct a performance test focused on the auth service interaction.. The tester must analyze the interaction between the configuration settings and the system behavior. With a high retry limit and a relatively short timeout, the system might be overloading itself by repeatedly attempting to connect to the authentication service. This scenario highlights why system testing must evaluate how environmental configurations impact system stability, especially when external dependencies like OAuth2 services are involved in the process.

Answer

Immediately request a code change to the authentication module.

Answer

Increase the timeout value to 600ms and retry the test.

Answer

Report a critical defect for the OAuth2 protocol implementation.

Question 4

Which THREE of the following activities are primary objectives of testing within the SDLC?

Accepted Answer

Preventing defects by reviewing requirements and designs.. The primary objectives of testing are to provide confidence in the quality of the software, find defects before release, and ensure that the product meets the specified requirements. These activities, when performed throughout the SDLC, help stakeholders make informed decisions about product readiness, minimize the risk of production failures, and ensure that the delivered system aligns with the intended business and technical goals.

Answer

Verifying that all software features work perfectly.

Answer

Guaranteeing that there are no bugs remaining in the code.

Question 5

Which testing level is primarily concerned with verifying the interaction between different modules or components to ensure they work together correctly?

Accepted Answer

System testing.. Component integration testing focuses on the interfaces and interactions between modules. This is essential because, even if individual components function correctly in isolation, they may fail when combined due to incompatible data formats, logic errors in calling sequences, or misunderstandings of shared interface specifications. Early integration testing helps isolate these issues before they become deeply embedded in the system's architecture.

Answer

Component testing.

Answer

Acceptance testing.

Answer

Maintenance testing.

Question 6

Which THREE of the following are key benefits of static testing?

Accepted Answer

Detection of defects before any code is executed.. Static testing is highly effective at identifying defects early, which is essential for minimizing project costs. By reviewing documents, code, and models without execution, teams find ambiguities and errors that are otherwise hidden. This process also improves communication between stakeholders and developers, ensuring that the software's design is robust and that the final implementation will align with expectations and quality standards.

Answer

Verification of performance under high user load.

Answer

Elimination of the need for dynamic testing entirely.

Question 7

Refer to the exhibit. A tester reviews this configuration file during the static testing of a test environment setup. What is the primary risk of this configuration in a formal testing phase?

Accepted Answer

The disabled strict mode may allow invalid data to be processed, masking bugs.. Testing requires stable and representative environments. The 'strict_mode: false' setting allows suboptimal code paths or weak error handling to pass, which should fail in production. Finding this via static testing prevents 'false negatives' where the system appears stable in testing due to permissive settings. Ensuring the test environment configuration mirrors production requirements is a critical aspect of early SDLC validation and risk management.

Answer

The log level set to debug will cause an overflow error in the production database.

Answer

The exponential retry policy will increase the latency of the system during stress testing.

Answer

The environment tag set to 'dev' indicates that the deployment is insecure by design.

Question 8

Which of the following activities best demonstrates the ISTQB principle of 'Testing provides early feedback'?

Accepted Answer

Reviewing user stories and acceptance criteria during the sprint planning session.. Early feedback is the core of shift-left testing. By performing static testing on documents like requirements or design specifications, testers identify defects before a single line of code is written. This is more efficient and cost-effective than finding defects during dynamic testing, as it prevents the cost of rework and ensures that quality is built into the product from the very start of development.

Answer

Executing automated regression tests at the end of each daily build.

Answer

Conducting a performance test on the integrated system before the final release.

Answer

Reporting defects found during the User Acceptance Testing (UAT) phase.

Question 9

Which TWO of the following statements accurately describe the role of testers in a modern SDLC?

Accepted Answer

Testers contribute by helping to define the acceptance criteria for user stories.. Modern testing emphasizes collaboration and early involvement. Testers serve as quality advocates who help define 'done' and verify that requirements are testable. By participating in reviews and planning, they facilitate a shared understanding of quality across the entire team, which is essential for successfully delivering software in iterative and incremental development environments.

Answer

Testers are solely responsible for all quality activities within the project.

Answer

Testers should focus exclusively on dynamic testing to prove the system works.

Answer

Testers should avoid participating in code reviews to remain unbiased.

Question 10

Which approach is most appropriate for maintaining quality when a project uses a DevOps culture with continuous deployment?

Accepted Answer

Automated regression tests integrated into the pipeline combined with production monitoring.. In continuous deployment, testing must be highly automated and integrated into the CI/CD pipeline. Shifting testing to the left ensures that code quality is verified at every commit, while monitoring provides the final feedback loop. This combination allows for rapid releases without sacrificing quality, which is the primary objective of DevOps and modern continuous testing practices.

Answer

Manual exploratory testing of every build before it is moved to production.

Answer

Performing formal, document-heavy system testing cycles after every code merge.

Answer

Requiring a separate QA phase where developers are not involved in testing.

Question 11

Which THREE of the following are benefits of static testing early in the SDLC?

Accepted Answer

Reduced cost of quality by finding defects before they are implemented in code.. Static testing is the most powerful tool for defect prevention. By analyzing documentation before implementation, teams can identify errors that are cheap to fix. It also clarifies requirements, improves communication, and provides a head start on test planning. These benefits compound throughout the SDLC, reducing rework and ensuring the final product matches the intended design and user requirements.

Answer

Elimination of the need for any dynamic testing in the later stages.

Answer

Automated code coverage analysis of the requirement document.

Question 12

Refer to the exhibit. A tester sees this error during load testing. Based on the principle of 'Testing throughout the SDLC', what should be the immediate recommendation?

Accepted Answer

Conduct a root cause analysis on the connection pool configuration and design.. Load testing identifies performance bottlenecks that won't appear in unit tests. A connection pool exhaustion indicates architectural or configuration issues that must be addressed at the infrastructure or design level. Recommending a review of the design or configuration ensures the fix is structural, rather than a superficial band-aid, adhering to the shift-left focus on addressing root causes early in the life cycle.

Answer

Ignore the error as it only occurs under high load, which is not the primary focus.

Answer

Increase the number of threads in the API gateway to mask the timeout.

Answer

Immediately roll back the last code deployment to the production environment.

Question 13

Which of the following describes the 'Testing' activity in the context of the V-model?

Accepted Answer

Testing activities correspond to specific development phases, starting at the requirements level.. The V-model emphasizes the relationship between each development phase and a corresponding testing phase. In this model, testing is not just a final stage; it is a parallel activity that starts with planning and design. This ensures that every development requirement has a corresponding verification method, providing a structured approach to quality assurance throughout the entire SDLC.

Answer

Testing is a distinct phase that occurs only after the final system integration.

Answer

Testing is used solely for defect detection at the very end of the development process.

Answer

Testing consists only of the execution of automated scripts against the finished code.

Question 14

What is the primary objective of static testing in the software development lifecycle?

Accepted Answer

To find defects in the software before it is executed.. The main goal of static testing is defect prevention. By identifying issues in documentation, requirements, and design early, it prevents these errors from being translated into software defects. This is highly efficient, as it is much cheaper to fix a requirement error on paper than a bug in the code, contributing significantly to overall project quality and cost-effectiveness.

Answer

To identify performance issues that might impact system scalability.

Answer

To verify that the software meets all functional requirements through execution.

Answer

To generate test data for future automated testing sessions.

Question 15

Refer to the exhibit. During static testing, a tester identifies that the 'lockout_duration_mins' is set to 15. What is the most likely risk identified by the tester?

Accepted Answer

The policy needs to be reviewed against security requirements to determine if it is appropriate.. A static review of security policies identifies vulnerabilities before they are deployed. A 15-minute lockout might be too short for effective brute-force protection or too long for legitimate user usability, depending on the risk model. Identifying these policy gaps during the design phase allows the team to adjust security settings to balance security and usability without requiring costly code changes post-deployment.

Answer

The password length requirement is too short and will cause an execution error.

Answer

The lockout duration is a configuration parameter that doesn't impact security.

Answer

The system will fail to compile because the policy is written in JSON format.