ISTQB_TEST MANAGEMENT_Risk-Based Testing_1.3.5 Techniques for Risk-Based Testing

Aspect Heavyweight Techniques Lightweight Techniques
Formality High (formal processes, detailed documentation) Low (less formal, minimal documentation)
Usage Context Safety-critical systems Non-safety-critical systems
Stakeholder Involvement Broad, multiple stakeholders Fewer stakeholders
Risk Analysis Detailed factors, mathematical calculations Ordinal scale for impact & likelihood
Examples 1. Hazard Analysis2. Cost of Exposure3. FMEA4. Fault Tree Analysis 1. SST (Systematic Software Testing)2. PRAM3. PRISMA
Dependence on Requirements Moderate to High SST requires full specs, PRAM/PRISMA can adapt

 


Technique Description
Hazard Analysis Identifies underlying hazards behind each risk. Often used in safety-critical systems.
Cost of Exposure Considers: 1) Likelihood of failure2) Cost of failure3) Cost of testing
FMEA (Failure Mode & Effects Analysis) Assesses risks based on severity, likelihood, and detection rate of failures.
Fault Tree Analysis Works backwards from failure to root causes using logic trees.
SST (Systematic Software Testing) Uses specifications to identify product risks and derive tests.
PRAM (Pragmatic Risk Analysis & Management) Practical, stakeholder-driven method using simplified scales.
PRISMA (Product Risk Management) Visual, structured risk identification with stakeholder input.


Question 1 (K2 – Understand)

Which of the following best distinguishes a lightweight risk-based testing technique from a heavyweight one?

A. Lightweight techniques use mathematical formulas for risk quantification.
B. Heavyweight techniques require minimal stakeholder involvement.
C. Lightweight techniques rely on ordinal scales for risk likelihood and impact.
D. Heavyweight techniques do not require formal documentation.

Correct Answer: C
Explanation: Lightweight techniques simplify analysis by using ordinal scales instead of detailed calculations.


📝 Question 2 (K3 – Apply)

You are working on a medical software project. The organization emphasizes formal safety analysis. Which risk-based testing technique is most appropriate?

A. PRAM
B. FMEA
C. SST
D. PRISMA

Correct Answer: B
Explanation: FMEA is commonly used in safety-critical domains like healthcare due to its formal severity and detection assessments.


📝 Question 3 (K3 – Apply)

A project manager wants to quantify the cost-effectiveness of testing specific functionalities. Which technique should the test manager recommend?

A. Hazard Analysis
B. Fault Tree Analysis
C. Cost of Exposure
D. PRISMA

Correct Answer: C
Explanation: Cost of Exposure evaluates the business impact and cost of testing, which helps quantify ROI of testing efforts.


📝 Question 4 (K4 – Analyze)

You are reviewing a risk assessment report. It includes a risk matrix with severity and detection ratings, and a calculated Risk Priority Number (RPN). What technique is most likely used?

A. PRISMA
B. SST
C. FMEA
D. Hazard Analysis

Correct Answer: C
Explanation: FMEA uses RPN calculated from severity, likelihood, and detection factors.


📝 Question 5 (K4 – Analyze)

You are leading a risk-based testing effort. The team lacks formal specs, and time is limited. Stakeholders prefer visual and interactive methods. What technique fits best?

A. FMEA
B. PRISMA
C. SST
D. Fault Tree Analysis

Correct Answer: B
Explanation: PRISMA is suitable for quick, visual risk identification involving stakeholders, even with limited specs.


Q1. Which of the following is a characteristic of Fault Tree Analysis?

A. Focuses on visualizing risks by category and likelihood.
B. Begins with root causes and traces them forward.
C. Analyzes failure causes backwards from the fault.
D. Is only applicable to agile projects.

Correct Answer: C


Q2. What is the main benefit of using lightweight techniques?

A. They require comprehensive safety data.
B. They are suitable for small teams and fast-paced environments.
C. They produce more accurate risk calculations.
D. They always include fault modeling.

Correct Answer: B


Q3. You are testing flight control software. Which technique should be prioritized?

A. SST
B. FMEA
C. PRAM
D. PRISMA

Correct Answer: B


Q4. What is a common limitation of lightweight techniques?

A. They rely too much on formal procedures.
B. They don’t involve any stakeholders.
C. They may miss deeper hazards due to simplified analysis.
D. They are expensive and time-consuming.

Correct Answer: C


Q5. In which situation is PRAM least effective?

A. No stakeholder time for workshops
B. Tight deadlines and limited budget
C. Informal documentation
D. Absence of formal requirements

Correct Answer: A

No comments:

Post a Comment

Lets Start...............

Cypress

Syllabus Q & A Set -1 Q & A Set -2