Question 1

What is the relationship between testing and quality assurance?

Accepted Answer

C

Explanation: Quality Assurance (QA) is a comprehensive, process-oriented set of activities designed to prevent defects and ensure that development and maintenance processes are continuously improved. It encompasses the entire software development lifecycle, including defining standards, conducting audits, and establishing procedures. Software testing is a crucial activity within this broader QA framework. Testing is a product-oriented activity, often considered a form of Quality Control (QC), which focuses on finding defects in the software product. Therefore, testing is a subset of the complete QA process, serving to verify that the product meets the quality standards established by the QA framework.

Question 2

Peter is performing a test to see that it complies with the user requirement that a certain field be populated by using a dropdown box containing a list of values. Peter is performing ______________.

Accepted Answer

A

Explanation: The test is being performed against a user requirement, focusing on the external behavior and functionality of the application—specifically, whether a field is populated by a dropdown box as specified. This method of testing, which evaluates the system's functionality without any knowledge of its internal code, structure, or implementation, is known as Black-Box Testing. The tester is concerned only with the inputs (selecting the dropdown) and the expected outputs (the field being populated from the list), treating the software as an opaque "black box."

Question 3

Leadership evaluations are based upon the appropriateness, effectiveness and extent of the executives' and of the company's involvement in relation to the size and type of business.

Accepted Answer

A

Explanation: The statement is correct. It articulates a fundamental principle of modern corporate governance and leadership assessment. Evaluating executive performance requires context. The appropriateness, effectiveness, and extent of leadership involvement are not absolute metrics; they are relative to the specific circumstances of the organization. Factors such as company size, industry sector, market position, and organizational complexity directly influence the challenges and expectations placed upon leadership. Therefore, any credible evaluation framework must be tailored to these contextual factors to provide a fair and meaningful assessment.

Question 4

Quality assurance is the process by which product quality is compared with applicable standards, and the action taken when nonconformance is detected.

Accepted Answer

B

Explanation: The statement provided in the question is an accurate definition of Quality Control (QC), not Quality Assurance (QA). Quality Assurance is a proactive, process-oriented set of activities focused on establishing and maintaining a framework of standards and procedures to prevent defects from occurring. In contrast, Quality Control is a reactive, product-oriented activity that involves inspecting, testing, and measuring a product to verify that it meets the specified quality standards and requirements. The process of "comparing product quality with applicable standards" and taking "action when nonconformance is detected" is the core function of Quality Control.

Question 5

The objective of risk analysis is to help IT management strike an economic balance between the impact of risks and the cost of protective measures.

Accepted Answer

A

Explanation: The statement accurately defines a primary objective of risk analysis within the broader context of risk management. The core purpose is to provide management with the necessary data to make informed, cost-effective decisions about security. It involves identifying potential threats and vulnerabilities, assessing their potential impact (e.g., financial loss, reputational damage), and estimating their likelihood. This analysis enables a cost-benefit comparison between the expense of implementing a security control (protective measure) and the value of the risk reduction it provides. The goal is not to eliminate all risks, which is often impossible or financially impractical, but to reduce them to an acceptable level in an economically sensible manner.

Question 6

The three parts of the function point count must be determined individually.

Accepted Answer

A

Explanation: The statement is correct. The Function Point Analysis (FPA) methodology, as defined by the International Function Point Users Group (IFPUG), is a structured process involving distinct steps. The final function point count is derived from three primary components that are determined individually: 1. Unadjusted Function Point (UFP) Count: Calculated by identifying, classifying, and weighting five function types (data and transactional). 2. Value Adjustment Factor (VAF): Derived from assessing the degree of influence of 14 General System Characteristics (GSCs). 3. Adjusted Function Point (AFP) Count: The final calculation where the UFP is multiplied by the VAF. Each of these components requires a separate and independent evaluation before the final result can be computed.

Question 7

Configuration management can be applied to non-test changes.

Accepted Answer

A

Explanation: Configuration Management (CM) is a formal engineering discipline that provides a structured process for establishing and maintaining the consistency of a product's attributes throughout its entire lifecycle. This scope is not limited to test artifacts. It encompasses all components, known as Configuration Items (CIs), including source code, design documents, requirements specifications, and hardware. Applying CM to non-test changes, such as a modification in the source code or an update to a requirement, is fundamental to ensuring traceability, controlling the evolution of the system, and maintaining the integrity of the final product.

Question 8

The average time between consecutive failures in a system or component during a specified period is known as the mean time between failures (MTBF).

Accepted Answer

A

Explanation: The statement provides an accurate definition of Mean Time Between Failures (MTBF). MTBF is a fundamental measure of reliability for repairable systems, representing the average elapsed time from the occurrence of one failure to the next. It is calculated by dividing the total operational time of the system by the number of failures observed during that period. This metric is crucial in software and systems engineering for predicting reliability and planning maintenance activities. The definition given in the question is the standard and widely accepted one in the field.

Question 9

The process of identifying the kinds of software failures that can occur and then quantifying how likely it is that they will actually occur is ______________.

Accepted Answer

C

Explanation: The process described is the definition of risk management, specifically the initial phases of risk identification and risk analysis. Risk management is a systematic discipline for identifying, analyzing, quantifying, and mitigating risks before they become problems. Identifying potential software failures is risk identification, while quantifying their likelihood of occurrence is a core component of risk analysis. These activities are fundamental to proactively managing potential negative outcomes in a software project.

Question 10

The inspection is an evaluation technique that relies on visual examination of an item.

Accepted Answer

A

Explanation: An inspection is a formal, static evaluation technique used in software engineering to find defects. The core of this process involves a team of peers meticulously examining a work product, such as a requirements document, design specification, or source code. This examination is primarily a visual and cognitive activity where participants read and analyze the material, often against a set of standards and checklists, to identify errors, omissions, and deviations. Since the work product is not executed, the technique fundamentally relies on this visual scrutiny to achieve its objective of early defect detection.

Question 11

Pick the best tactic to use in constructive criticism to help the worker understand his or her solution to the criticism.

Accepted Answer

B

Explanation: The core principle of constructive criticism is to facilitate improvement, not to punish. Being prepared to help an employee improve their performance is the most effective tactic because it transforms the feedback session into a collaborative, solution-oriented coaching opportunity. This approach focuses on future success rather than past failures, fostering a supportive environment where the employee feels valued and is more receptive to the criticism. By offering assistance, the manager demonstrates a commitment to the employee's development, which is crucial for helping them understand and implement the necessary changes to their work.

Question 12

Which of the processes includes all activities of the performing organization that determines policies and responsibilities of a project?

Accepted Answer

C

Explanation: Project Quality Management is the formal process that includes all the activities necessary to determine and implement the quality policy. It defines the quality objectives, roles, and responsibilities for the project to ensure it meets the stakeholders' needs and requirements. This overarching process encompasses quality planning (defining policies and standards), quality assurance (auditing processes), and quality control (inspecting outcomes). Therefore, it is the process that includes the determination of policies and responsibilities as described in the question.

Question 13

Quality can be separated from the controls associated with it?

Accepted Answer

B

Explanation: Quality is not an accidental attribute but the outcome of a planned and systematically executed process. Quality Assurance (QA) and Quality Control (QC) are the disciplines that establish and implement these processes. Quality Control specifically involves the operational techniques and activities used to fulfill requirements for quality. These activities are the "controls"—such as reviews, inspections, and tests—that are implemented to prevent, detect, and correct defects. Therefore, the achievement and maintenance of quality are intrinsically dependent on the effectiveness of the controls associated with the development lifecycle. Separating the two implies that quality can be achieved consistently without a defined, managed, and controlled process, which contradicts fundamental principles of software engineering and quality management.

Question 14

Inspections may or may not involve the author of the work product.

Accepted Answer

A

Explanation: While classic, formal inspection processes, such as those defined by Fagan or in IEEE Std 1028, specify the author as a required participant, variations in practice exist. The author's primary role is to provide clarification on the work product, not to defend it. However, some organizations conduct inspections without the author present in the defect-logging meeting. This approach is taken to foster a more open critique, prevent author defensiveness, and test if the work product can be understood on its own merits. In these cases, the author is still involved in the overall process (e.g., preparation and subsequent rework), but not in the meeting itself. Therefore, the statement that inspections "may or may not" involve the author is correct.

Question 15

A program whose purpose is to reduce the number of defects produced is known as a quality improvement program.

Accepted Answer

A

Explanation: A quality improvement program is a systematic, planned initiative to enhance the quality of a product, service, or process. In the context of software engineering, a primary measure of quality is the degree to which the software is free from defects. Therefore, a program whose explicit purpose is to reduce the number of defects—through methods like root cause analysis, process refinement, and preventative actions—is fundamentally a quality improvement program. The reduction of defects is a direct and measurable way to increase software quality.

Free PeopleCert CSTE Actual Exam Questions