Free ISTQB ATM Actual Exam Questions
The questions for this exam were last updated on January 7, 2026
Dumps Box (DumpsBox) offers up-to-date practice exam questions for ATM certification exam which are developed and validated by ISTQB subject domain experts certified in ISTQB ATM . These practice questions are update regularly as we keep an eye on any recent changes in ATM syllabus, and when there is update our team quickly adjusts the questions. This commitment to providing the best quality exam prep material to certification aspirants is what makes DumpsBox.com the best certification exam prep website. On top of that, our strong, yet strictly moderated, community based feedback keeps the content clean and current. Each question has helpful community discussion that provides it extra perspective and introduces helpful resources for better exam preparation. This also saves students from other outdated practice questions or illicit exam dumps that can have adverse affects on career. Browse through our ISTQB ATM exam questions and pass your exam on first try.
Question No. 1
Assume you are working on a CAS (Conditional Access System) for Pay-TV that allows the access,
selection and transfer of services and media to authorized users. Authorized users can choose their
services through different channels: Web Customer Portal, IVR (Interactive Voice Response), Call
Centre and SMS. The system uses a Smart Card to receive and decrypt the broadcasted encrypted
control words which allow decrypting pay-per-view TV. Every authorized user must have a Smart
Card and a Set-Top Box to view the contents.
The following is an excerpt from the product risk analysis document:
Both likelihood and impact have been rated on the following scale: (1 – Very low, 2 – Low, 3 –
Medium, 4 – High, 5 – Very High).
The required test environment and code have been delivered. All test cases for each identified
product risk item have been written and are ready to be executed. The Database used to contain the
Smart Cards is empty and so only new Smart Cards can be used during test execution.
A Smart Card can only be activated if it has been previously pre-activated. This means the
postconditions for the execution of the test cases to test the pre-activation of the Smart Card are the
pre-conditions for activation of the Smart Card.
Which of the following statements represents the most effective contribution of the stakeholders to
the completion of the failure mode analysis table?
K4 3 credits
selection and transfer of services and media to authorized users. Authorized users can choose their
services through different channels: Web Customer Portal, IVR (Interactive Voice Response), Call
Centre and SMS. The system uses a Smart Card to receive and decrypt the broadcasted encrypted
control words which allow decrypting pay-per-view TV. Every authorized user must have a Smart
Card and a Set-Top Box to view the contents.
The following is an excerpt from the product risk analysis document:
Both likelihood and impact have been rated on the following scale: (1 – Very low, 2 – Low, 3 –
Medium, 4 – High, 5 – Very High).
The required test environment and code have been delivered. All test cases for each identified
product risk item have been written and are ready to be executed. The Database used to contain the
Smart Cards is empty and so only new Smart Cards can be used during test execution.
A Smart Card can only be activated if it has been previously pre-activated. This means the
postconditions for the execution of the test cases to test the pre-activation of the Smart Card are the
pre-conditions for activation of the Smart Card.
Which of the following statements represents the most effective contribution of the stakeholders to
the completion of the failure mode analysis table?
K4 3 credits
Select one option, then reveal solution.
Question No. 2
You are the Test Manager on a project following an iterative life-cycle model. The project should
consist of nine iterations of one month duration each. It is planned to develop the most important
features to have a stable core of the application in the first three iterations and to add the additional
features in the last six iterations.
At the beginning of the first iteration, only a draft version of the requirements specification
document for the core features is available. Assume that during each of the first three iterations, the
chosen features are fully completed and unit tested.
Which of the following statements is true in this context?
K4 3 credits
consist of nine iterations of one month duration each. It is planned to develop the most important
features to have a stable core of the application in the first three iterations and to add the additional
features in the last six iterations.
At the beginning of the first iteration, only a draft version of the requirements specification
document for the core features is available. Assume that during each of the first three iterations, the
chosen features are fully completed and unit tested.
Which of the following statements is true in this context?
K4 3 credits
Select one option, then reveal solution.
Question No. 3
The following are the exit criteria described in the test plan of a software product:
EX1. The test suite for the product must ensure that at least each quality risk item is covered by at
least one test case (a quality risk item can be covered by more test cases).
EX2. All test cases in the test suite must be run during the execution phase.
EX3. Defects are classified into two categories: “C” (critical defect) and “NC” (non-critical defect).
No known C defects shall exist in the product at the end of the test execution phase.
Which of the following information is useless when the specified exit criteria is evaluated? K2 1
credit
EX1. The test suite for the product must ensure that at least each quality risk item is covered by at
least one test case (a quality risk item can be covered by more test cases).
EX2. All test cases in the test suite must be run during the execution phase.
EX3. Defects are classified into two categories: “C” (critical defect) and “NC” (non-critical defect).
No known C defects shall exist in the product at the end of the test execution phase.
Which of the following information is useless when the specified exit criteria is evaluated? K2 1
credit
Select one option, then reveal solution.
Question No. 4
You are the Test Manager of a new project aimed at developing a software system that must be
certified at level B of the DO-178B standard. The project will follow a V-Model software development
life cycle and it will have four formal levels of testing: component, integration, system and
acceptance testing.
You must produce the test plan documentation for this project by providing an adequate
coordination across the four levels of testing in order to assure audit ability.
Which of the following answers would you expect to best describe how to organize the test plan?
K3 2 credits
certified at level B of the DO-178B standard. The project will follow a V-Model software development
life cycle and it will have four formal levels of testing: component, integration, system and
acceptance testing.
You must produce the test plan documentation for this project by providing an adequate
coordination across the four levels of testing in order to assure audit ability.
Which of the following answers would you expect to best describe how to organize the test plan?
K3 2 credits
Select one option, then reveal solution.
Question No. 5
The main objectives the senior management team wants to achieve are:
- to reduce the costs associated with dynamic testing
- to use reviews to ensure that the project is on course for success and following the plan
- to use reviews as a well-documented and effective bug-removal activity following a formal process
with well-defined roles
- to determine the effectiveness of reviews in terms of phase containment
- to improve phase containment effectiveness
Which of the following answers would you expect to describe the best way to achieve these
objectives?
K4 3 credits
- to reduce the costs associated with dynamic testing
- to use reviews to ensure that the project is on course for success and following the plan
- to use reviews as a well-documented and effective bug-removal activity following a formal process
with well-defined roles
- to determine the effectiveness of reviews in terms of phase containment
- to improve phase containment effectiveness
Which of the following answers would you expect to describe the best way to achieve these
objectives?
K4 3 credits
Select one option, then reveal solution.
Question No. 6
Assume that the following test cases have been executed at the end of the first week of test
execution: TC-001, TC-002 and TC-007. All these tests are ‘passes’.
What is the MINIMUM number of the remaining test cases that must be successfully executed to
fulfill the EX1 exit criteria?
K3 2 credits
execution: TC-001, TC-002 and TC-007. All these tests are ‘passes’.
What is the MINIMUM number of the remaining test cases that must be successfully executed to
fulfill the EX1 exit criteria?
K3 2 credits
Select one option, then reveal solution.
Question No. 7
During the system testing phase a tester from your test team observes a failure in the system under
test and he/she decides to create an incident report. The incident report is currently in a “new” state,
indicating it needs to be investigated.
Which THREE of the following information items can’t yet be present in the incident report? K3 2
credits (2 credits out of 3 credits correct, 1 credit point)
test and he/she decides to create an incident report. The incident report is currently in a “new” state,
indicating it needs to be investigated.
Which THREE of the following information items can’t yet be present in the incident report? K3 2
credits (2 credits out of 3 credits correct, 1 credit point)
Select all that apply, then reveal solution.
Question No. 8
Consider the following statements describing the importance of improving the test process: I. Test process improvement is important because being focused only on the test process it can provide recommendations to improve the test process itself, but it can’t indicate or suggest improvement to areas of the development process II. Test process improvement is important because it is much more effective than software process improvement to improve the quality of a software system III. Test process improvement is important because several process improvement models (STEP, TPI Next, TMMi) have been developed over the years IV. Test process improvement is important because every organization, regardless of the context, should always achieve the maximum level of maturity of testing described in the test improvement models such as TMMi Which of the following answers is correct? K2 1 credit
Select one option, then reveal solution.
Question No. 9
You are working on a project to develop an authentication system for an e-commerce website. This
system provides two features: Registration and authentication. Two different development teams
develop these two features.
There is a high likelihood that the delivery of the authentication feature to the test team will be three
weeks later. To complete the registration the user must provide the following registration inputs:
Name, surname, birth date, fiscal code and he/she can select a username and a password. A
registered user can be a special user or a normal user. To be identified as a special user, he/she must
also provide, during the registration process, a voucher possibly received from the IT department.
Access is granted only if a user is registered and the password is correct: In all other cases access is
denied. If the registered user is a special user and the password is wrong, a special warning is shown
on the system console. You are currently performing a quality risk analysis using FMEA .
Based only on the given information, which of the following is NOT a product risk that could be
identified during the quality risk analysis? K4 3 credits
system provides two features: Registration and authentication. Two different development teams
develop these two features.
There is a high likelihood that the delivery of the authentication feature to the test team will be three
weeks later. To complete the registration the user must provide the following registration inputs:
Name, surname, birth date, fiscal code and he/she can select a username and a password. A
registered user can be a special user or a normal user. To be identified as a special user, he/she must
also provide, during the registration process, a voucher possibly received from the IT department.
Access is granted only if a user is registered and the password is correct: In all other cases access is
denied. If the registered user is a special user and the password is wrong, a special warning is shown
on the system console. You are currently performing a quality risk analysis using FMEA .
Based only on the given information, which of the following is NOT a product risk that could be
identified during the quality risk analysis? K4 3 credits
Select one option, then reveal solution.
Question No. 10
Assume you have some data related to confirmation testing during system testing of a past project.
In that project 240 bug reports have been opened once, 80 were opened twice, 10 were opened
three times and no bug reports have been opened more than three times.
You estimate that a bug report, which has failed its confirmation test, costs, on average, 3
personhours.
Which of the following statements correctly describe the value of these confirmatory testing
activities based on cost of quality?
K3 2 credits
In that project 240 bug reports have been opened once, 80 were opened twice, 10 were opened
three times and no bug reports have been opened more than three times.
You estimate that a bug report, which has failed its confirmation test, costs, on average, 3
personhours.
Which of the following statements correctly describe the value of these confirmatory testing
activities based on cost of quality?
K3 2 credits
Select one option, then reveal solution.
Question No. 11
Consider the following skills assessment spreadsheet for your test team (consisting of four team
members):
This spreadsheet has three sections: technical expertise, testing skills and professionalism.
The skill levels for each skill area for both the “technical expertise” and “testing skills” sections have
been rated on a four-point scale:
- E (Expert): indicates that a person has expert knowledge and experience in the skill area
- B (Beginner): indicates that a person has some knowledge and experience in the skill area but
he/she is not autonomous
- W (Wants to learn): indicates that a person has no knowledge or experience in the skill area but
he/she wants to learn that skill
- NI (Not Interested): indicates that a person has no knowledge or experience in the skill area and
he/she is not interested to learn that skill
The skill levels for each skill area of the “professionalism” section have been rated on a three point
scale (H=High, M=Medium, L=Low).
Consider the following analysis of testing skills performed on four people. Alex, Robert, John and
Mark (all the skills have been rated on an ascending scale. The higher the score, the better the skill):
Which of these people, based on this analysis, would you expect to be most suitable to work
specifically as test designer?
K4 3 credits
members):
This spreadsheet has three sections: technical expertise, testing skills and professionalism.
The skill levels for each skill area for both the “technical expertise” and “testing skills” sections have
been rated on a four-point scale:
- E (Expert): indicates that a person has expert knowledge and experience in the skill area
- B (Beginner): indicates that a person has some knowledge and experience in the skill area but
he/she is not autonomous
- W (Wants to learn): indicates that a person has no knowledge or experience in the skill area but
he/she wants to learn that skill
- NI (Not Interested): indicates that a person has no knowledge or experience in the skill area and
he/she is not interested to learn that skill
The skill levels for each skill area of the “professionalism” section have been rated on a three point
scale (H=High, M=Medium, L=Low).
Consider the following analysis of testing skills performed on four people. Alex, Robert, John and
Mark (all the skills have been rated on an ascending scale. The higher the score, the better the skill):
Which of these people, based on this analysis, would you expect to be most suitable to work
specifically as test designer?
K4 3 credits
Select one option, then reveal solution.
Question No. 12
Which of the following statements about the TMMi test process improvement model is true? K2 1
credit
credit
Select one option, then reveal solution.
Question No. 13
In the next two months some new features will be constantly added to new releases of a project you
are working on as Test Manager.
You have identified as one of the main project risks, that the requirements specification will still be
incomplete when your team starts the test design and implementation phase.
Some requirements will most likely be completed too late to allow a proper test preparation. You and
your test team have already worked on several similar past projects in the same organization.
Which one of the following options would you expect to be the most effective at mitigating this risk?
K4 3 credits
are working on as Test Manager.
You have identified as one of the main project risks, that the requirements specification will still be
incomplete when your team starts the test design and implementation phase.
Some requirements will most likely be completed too late to allow a proper test preparation. You and
your test team have already worked on several similar past projects in the same organization.
Which one of the following options would you expect to be the most effective at mitigating this risk?
K4 3 credits
Select one option, then reveal solution.
Question No. 14
Assume you are a Test Manager involved in system testing of a CRM application for a Pay-TV
company. Currently the application is able to support a proper number of users assuring the required
responsiveness. Since the business is expected to grow, you have been asked to evaluate the ability
of the application to grow to support more users while maintaining the same responsiveness.
Which of the following tools would you expect to be the most useful at performing this evaluation?
K2 1 credit
company. Currently the application is able to support a proper number of users assuring the required
responsiveness. Since the business is expected to grow, you have been asked to evaluate the ability
of the application to grow to support more users while maintaining the same responsiveness.
Which of the following tools would you expect to be the most useful at performing this evaluation?
K2 1 credit
Select one option, then reveal solution.
Question No. 15
Assume you are working on a defect management process to be used by a software organization to
track the current status of the defects reports for several projects.
When a defect is found for investigation a defect report is created in “Opened” state that is the
unique initial state. The defect report status has also a unique finale state that is the “Closed” state.
The following state transition diagram describes the states of this defect management process:
Where only the initial (“Opened”) and final (“Closed”) states are indicated while the remaining states
(V, W, X, Y, Z) have yet to be named.
Which of the following assignments would you expect to best complete the defect management
process?
K3 2 credits
track the current status of the defects reports for several projects.
When a defect is found for investigation a defect report is created in “Opened” state that is the
unique initial state. The defect report status has also a unique finale state that is the “Closed” state.
The following state transition diagram describes the states of this defect management process:
Where only the initial (“Opened”) and final (“Closed”) states are indicated while the remaining states
(V, W, X, Y, Z) have yet to be named.
Which of the following assignments would you expect to best complete the defect management
process?
K3 2 credits
Select one option, then reveal solution.