Question 1

Results from a process audit show that the requirements group does not control changes to its
software specifications. Which of the following basic requirements should be added to the software
configuration management (SCM) policy?

Accepted Answer

C

Explanation: When the requirements group does not control changes to software specifications, a basic requirement is to assign explicit responsibility for software configuration management (SCM) for each project. Here's why: Clear Accountability: Assigning explicit responsibility ensures that someone is accountable for managing and controlling changes. Consistency in Process: This ensures consistent application of SCM practices across different projects. Improved Control: Clear responsibility helps in better monitoring and controlling changes, reducing the risk of unauthorized or untracked changes. Policy Enforcement: Facilitates the enforcement of SCM policies and procedures, ensuring compliance and integrity of the project. Reference: "Software Configuration Management Patterns: Effective Teamwork, Practical Integration" by Stephen P. Berczuk and Brad Appleton. "Software Configuration Management Strategies and Rational ClearCase: A Practical Introduction" by Brian A. White.

Question 2

One advantage of outsourcing is that it allows the primary company to

Accepted Answer

A

Explanation: Outsourcing is a business practice where a company hires an external organization to perform tasks, handle operations, or provide services. One key advantage of outsourcing is that it allows the primary company to focus its resources on its core competencies. By delegating non-core activities to external specialists, the company can concentrate on what it does best, thereby enhancing efficiency, innovation, and competitive advantage in its primary market. Reference: "The Outsourcing Revolution" by Michael F. Corbett IEEE Software Engineering Body of Knowledge (SWEBOK), Chapter on Software Engineering Management

Question 3

Under which of the following major Cost of Quality categories would testing a software upgrade be classified?

Accepted Answer

A

Explanation: Testing a software upgrade is classified under the appraisal category of the Cost of Quality. Appraisal costs are associated with evaluating and measuring the quality of products through testing and inspection to ensure they meet quality standards and specifications. Reference: ISO 9001:2015 quality management principles and ASQ (American Society for Quality) definitions of Cost of Quality, which categorize testing activities as appraisal costs.

Question 4

Which of the following libraries would be most appropriate for a tester to use when experimenting with different test case designs?

Accepted Answer

C

Explanation: The lead auditor acts as the final arbitrator for any audit-related issues that cannot be handled at a lower level. This individual is responsible for the overall conduct of the audit, ensuring that the audit is performed according to the plan and that all findings are appropriately addressed and resolved. The lead auditor has the authority to make final decisions on disputes or issues that arise during the audit process, ensuring objectivity and adherence to audit standards. Reference: ISO 19011: Guidelines for Auditing Management Systems "Internal Auditing: Assurance & Advisory Services" by Urton L. Anderson, Michael J. Head, et al.

Question 5

When a team is defining a software metrics program, which of the following steps must be taken first?

Accepted Answer

C

Explanation: Setting Goals: Before data can be effectively collected and utilized, it’s essential to have clear goals. This ensures that the data collection process is aligned with the organization's objectives. Importance of Goals: Establishing the data collection goal ensures that the team collects relevant and meaningful data, which can be analyzed to improve processes and products. Sequential Process: After setting goals, the team can then determine what specific data to collect, how to collect it, and which metrics to report. This ensures a systematic approach to metrics program development.

Question 6

A company uses a feature rating system with the following values.
1
= Completely dissatisfied
2
= Somewhat dissatisfied
3
= Neither satisfied nor dissatisfied
4
= Somewhat satisfied
5
= Completely satisfied
This rating system is based on what type of measurement scale?

Accepted Answer

B

Explanation: The feature rating system described (1 = Completely dissatisfied, 2 = Somewhat dissatisfied, 3 = Neither satisfied nor dissatisfied, 4 = Somewhat satisfied, 5 = Completely satisfied) is based on an ordinal measurement scale. Ordinal scales categorize data into distinct groups that have a meaningful order or ranking, but the intervals between the ranks are not necessarily equal. In this case, the ratings provide a rank order of satisfaction levels.

Question 7

A software project requires data to be secure due to export control regulations The software project
needs to be running on the client's virtual machines, and the client does not want to connect to the
software through their enterprise VPN. Which of the following cloud ownership and service model
combinations should the client use?

Accepted Answer

C

Explanation: For secure data handling due to export control regulations, running on the client's virtual machines without connecting through an enterprise VPN, the combination of a private cloud and infrastructure as a service (IaaS) is suitable. This setup allows the client to have dedicated infrastructure and control over their data environment, ensuring compliance with security and regulatory requirements. Reference: NIST SP 800-145, which provides guidelines on cloud computing and defines private cloud and IaaS models for enhanced security and control.

Question 8

Which of the following activities should be classified as an internal failure cost?

Accepted Answer

D

Explanation: Internal failure costs are costs associated with defects found before the product reaches the customer. These costs include: Investigation of defects: Identifying and analyzing defects within the development process. Rework: Fixing defects found during internal testing or audits. Scrap: Discarding defective parts or products. Downtime: Halting production or development to address defects. Among the given options, investigating the cause of build defects is an internal failure cost because it pertains to finding and analyzing issues within the software before it is released to customers. Reference: "Quality Planning and Analysis" by J.M. Juran and F.M. Gryna "Total Quality Management" by Besterfield et al.

Question 9

Static analysis tools are used to evaluate

Accepted Answer

D

Explanation: Static analysis tools are used to evaluate documentation and source code. These tools analyze the code without executing it, looking for potential errors, coding standard violations, security vulnerabilities, and other issues. By reviewing the source code and associated documentation, static analysis helps in identifying problems early in the development process, improving code quality and reducing the likelihood of defects in the final product. Reference: "Code Complete: A Practical Handbook of Software Construction" by Steve McConnell "Static Analysis: Results from the Static Analysis Tool Exposition (SATE) IV" by Paul E. Black, Elizabeth Fong, et al.

Question 10

Which of the following types of tests should be run on an installation of a new client server development environment that has 2 to 25 users in order to ensure it meets the company's requirements?

Accepted Answer

D

Explanation: Performance tests are essential for ensuring that a new client-server development environment can handle the expected load and perform adequately with 2 to 25 users. These tests help evaluate how the system performs under various conditions, such as peak load times and typical usage scenarios, ensuring that it meets the company's performance requirements. By running performance tests, you can identify potential bottlenecks, optimize resource usage, and ensure that the system can scale effectively.

Question 11

During the design review of several sections (modules) of software, the reviewers find an unusually
high number of defects After defect correction and testing, which of the following can be expected of
these sections?

Accepted Answer

D

Explanation: When a section of the software has an unusually high number of defects, even after correction and testing, it is likely that these sections might still contain additional defects. This is based on the defect clustering principle, which suggests that defects tend to cluster in certain modules of the software. Consequently, these sections require more thorough testing and scrutiny to ensure all defects are identified and resolved. It is unrealistic to assume that these sections will be free of defects after initial corrections. They often need more comprehensive testing and more detailed test documentation to track and manage the corrections and any subsequent issues that may arise. Reference: "Software Testing Techniques" by Boris Beizer. "The Art of Software Testing" by Glenford J. Myers.

Question 12

Which of the following sources of information would be most appropriate for a company to use to measure and monitor customer satisfaction?

Accepted Answer

A

Explanation: Comprehensive surveys covering all aspects of the customer experience are the most appropriate source of information for a company to use to measure and monitor customer satisfaction. These surveys provide a holistic view of the customer’s interactions with the product and service, covering various dimensions such as product quality, usability, support, and overall satisfaction. By gathering detailed feedback across these areas, companies can identify strengths and areas for improvement, ensuring that customer satisfaction is accurately measured and monitored. Reference: Hill, Nigel, Roche, Greg, and Allen, Rachel. "Customer Satisfaction: The Customer Experience Through the Customer's Eyes." Cogent Publishing, 2007. ISO 10004:2012, Quality management - Customer satisfaction - Guidelines for monitoring and measuring.

Question 13

An organization uses the plan-do-check-act (PDCA) cycle to align its processes to an international quality standard, which of the following activities would be performed during the "act" step?

Accepted Answer

C

Explanation: PDCA Cycle Overview: The Plan-Do-Check-Act (PDCA) cycle is a continuous improvement process used to align processes with quality standards. Act Phase: In the 'Act' step, the organization acts on the findings from the 'Check' step to implement changes that improve the process. This typically involves making revisions to the quality system. Quality Improvements: By making revisions based on the findings from audits and performance evaluations, the organization continuously improves its processes and aligns them better with international standards.

Question 14

Software security is developed to address which of the following types of communication threats?

Accepted Answer

A

Explanation: Software security is designed to protect systems and data from various types of communication threats. These threats can be categorized as: Intentional Attacks: These are deliberate actions taken by malicious individuals or groups aiming to exploit software vulnerabilities for gain, disruption, or espionage. Examples include hacking, phishing, and malware attacks. Unintentional Attacks: These are accidental events that can cause security breaches, such as user errors or software bugs. Physical Attacks: These involve physical actions against hardware that can affect software, like theft or damage. Natural Disasters: Events such as earthquakes or floods that can physically damage systems and cause software failures. Among these, software security primarily addresses intentional attacks. The focus is on preventing unauthorized access, data breaches, and other forms of cyber attacks. Reference: "Software Security: Building Security In" by Gary McGraw NIST Special Publication 800-53, Security and Privacy Controls for Information Systems and Organizations

Question 15

Quality function deployment is defined as a

Accepted Answer

C

Explanation: Quality Function Deployment (QFD) is a method used to translate customer needs (the voice of the customer) into specific product features (technical requirements). It provides a structured approach for defining customer requirements and transforming them into detailed engineering specifications and plans to produce the products that fulfill those needs. QFD uses tools like the House of Quality matrix to ensure that customer requirements are systematically addressed throughout the product development process. Reference: Akao, Yoji. "Quality Function Deployment: Integrating Customer Requirements into Product Design." Productivity Press, 1990. Hauser, John R., and Don Clausing. "The House of Quality." Harvard Business Review, May-June 1988.

Free ASQ CSQE Actual Exam Questions