Get Latest [Feb-2022] Conduct effective penetration tests using RealValidExam CTAL-TM_Syll2012
Penetration testers simulate CTAL-TM_Syll2012 exam PDF
ISQI CTAL-TM_Syll2012 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION 26
You are estimating the effort for the integration testing activities of a new project. Consider the following factors, which can affect that estimation:
I. Availability of re-usable test systems and documentation from previous, similar projects
II. Unexpected timing of components arrival
III. Stability of the integration test team (no turnover)
IV. Many and geographically distributed sub-teams Which of the following statements is true?
K2 1 credit
- A. II. and III. can negatively affect the estimation
- B. II. and IV. can negatively affect the estimation
- C. and III. usually favor the accuracy of the estimation effort
- D. and IV. usually favor the accuracy of the estimation effort
- E. and II. usually favor the accuracy of the estimation effort
- F. I. and II. can negatively affect the estimation III. and IV. usually favor the accuracy of the estimation effort
- G. III. and IV. can negatively affect the estimation
Answer: D
NEW QUESTION 27
Test Management
The following chart plots the cumulative number of defects opened against the cumulative number of defects closed during system testing of a software product.
Which of the following statements is true?
- A. The chart seems to indicate that the defect management process is not working well
- B. The chart seems to indicate that the defect management process is working well
- C. The chart can be used to reveal test progress problems
- D. The chart indicates that you have plenty of problems left to find
Answer: B
NEW QUESTION 28
Test Management
You are the Test Manager of a new project aimed at developing a software system that must be certified at level B of the DO-178B standard. The project will follow a V-Model software development life cycle and it will have four formal levels of testing: component, integration, system and acceptance testing.
You must produce the test plan documentation for this project by providing an adequate coordination across the four levels of testing in order to assure auditability.
Which of the following answers would you expect to best describe how to organize the test plan?
- A. Produce four separate detailed level test plans, one for each level, without a master test plan
- B. Produce a master test plan that covers three levels (component, integration, system test) and a separate acceptance test plan
- C. Produce a master test plan describing the relationship between the four levels, and four separate detailed level test plans, one for each level
- D. Produce a single master test plan that covers in detail all four levels, describing the particular activities for all test levels
Answer: C
NEW QUESTION 29
You can count on well-written requirements, but you can't count on an adequate contribution of the stakeholders to the quality risk analysis. You have to mitigate the insufficient contribution of the stakeholders because the risk-based testing approach shall minimize the product risks. Your test team has one expert tester in security testing.
Which of the following test activities would you expect to be the less important in this context?
- A. Extract from the defect tracking system of the previous project all the security defects and failures, and classify them to support design and execution of specific tests
- B. Perform exploratory testing sessions with adequate charters covering security aspects
- C. Automate all functional and non-functional system tests
- D. Apply systematic and exploratory testing for integration and system test
Answer: C
Explanation:
Section: Test Management
NEW QUESTION 30
Improving the Testing Process
Which of the following statements about the TMMi test process improvement model is true?
Number of correct responses: 1
K2 1 credit
- A. TMMi has a staged architecture for process improvement with seven maturity levels
- B. In TMMi all the process areas at lower levels must be 75% complete by achieving specific and generic goals in order to claim the higher level
- C. At TMMi level 1 testing is chaotic without a defined process, and it is often seen as the same as debugging
- D. TMMi provides an approach for test process improvement such as the IDEAL (Initiating, Diagnosing, Establishing, Acting and Learning) model
Answer: C
NEW QUESTION 31
Defect Management
During the system testing phase a tester from your test team observes a failure in the system under test and he/she decides to create an incident report. The incident report is currently in a "new" state, indicating it needs to be investigated.
Which THREE of the following information items can't yet be present in the incident report?
- A. Steps to reproduce the failure, including screenshots, database dumps and logs where applicable
- B. The actual and the expected result highlighting the failure
- C. The lifecycle phase in which the defect has been introduced
- D. What really caused the failure (actual cause)
- E. The type of defect that caused the failure
Answer: C,D,E
NEW QUESTION 32
Test Management
For which of the following activities would the costs be classified as a cost of detection?
Number of correct responses: 1
K2 1 credit
- A. Writing test specifications according to the test design
- B. Training developers to better understand the new features of the coding language they will use on the project
- C. Re-running a test case, during the system testing phase, to verify that a fix eliminates a previously found defect
- D. Fixing field failures
Answer: A
NEW QUESTION 33
Test Management
Which one of the following metrics to be produced needs traceability between the test cases and each item in a proper test basis?
- A. Mean time between failures for the system
- B. Trends in the lag time from defect reporting to resolution
- C. Requirements coverage
- D. Cumulative number of reported defects versus cumulative number of resolved defects
Answer: C
Explanation:
Section: Test Management
Explanation/Reference:
NEW QUESTION 34
Test Management
You are the Test Manager on a project following an iterative life-cycle model. The project should consist of nine iterations of one month duration each. It is planned to develop the most important features to have a stable core of the application in the first three iterations and to add the additional features in the last six iterations.
At the beginning of the first iteration, only a draft version of the requirements specification document for the core features is available. Assume that during each of the first three iterations, the chosen features are fully completed and unit tested.
Which of the following statements is true in this context?
Number of correct responses: 1
K4 3 credits
- A. You should allocate a large effort for system testing during the first three iterations
- B. You should allocate all the effort for the system test phase only in the last iteration
- C. The system test phase should start when all the requirements are frozen
- D. You should apply the same test strategy as used in a sequential life cycle model
Answer: A
NEW QUESTION 35
You are the Test Manager of a project that adopts a V-model with four formal levels of testinG. unit, integration, system and acceptance testing.
On this project reviews have been conducted for each development phase prior to testing, which is to say that reviews of requirements, functional specification, high-level design, low-level design and code have been performed prior to testing.
Assume that no requirements defects have been reported after the release of the product.
Which TWO of the following metrics do you need in order to evaluate the requirements reviews in terms of phase containment effectiveness?
K3 2 credits
- A. Total number of defects attributable to requirements found during unit, integration, system and acceptance testing
- B. Total number of defects found during functional specification review, high-level design review, low-level design review, code review, unit testing, integration testing, system testing and acceptance testing
- C. Number of defects found during the requirements review
- D. Total number of defects attributable to requirements, found during functional specification review, high-level design review, low-level design review, code review, unit testing, integration testing, system testing and acceptance testing
- E. Time to conduct the requirements review
Answer: C,D
Explanation:
Topic 4, Defect Management
NEW QUESTION 36
Test Tools and Automation
Assume you are managing a test automation project for a mission-critical system.
Because vendor provided tools and open source solutions don't meet the needs of this project, you ask your test team to develop a custom automation framework.
Which of the following management issues associated to the development of this custom automation framework is least likely to manage?
Number of correct responses: 1
K2 1 credit
- A. The custom automation framework will need proper maintenance
- B. Proper testing for the custom automation framework must be performed
- C. The changes to the custom automation framework should be communicated to all external users of this tool under the GNU license
- D. The custom automation framework will require an adequate documentation
Answer: C
NEW QUESTION 37
Which of the following statements describing the consequences of specifying test conditions at a detailed level is NOT true?
K2 1 credit
- A. For system testing, the specification of test conditions at a detailed level, carried out early in the project as soon as the test basis is established, can contribute to defect prevention
- B. The specification of test conditions at a detailed level can be effective when no formal requirements or other development work products are available
- C. The specification of test conditions at a detailed level can require the implementation of an adequate level of formality across the team
- D. In an environment where the test basis is continuously changing, it is recommended to specify test conditions at a detailed level in order to achieve a better maintainability
Answer: D
NEW QUESTION 38
Reviews
Which of the following factors could negatively influence a review?
- A. Include people with the adequate level of knowledge, both technical and procedural
- B. Include people able to contribute to a clear, thoughtful, constructive and objective discussion
- C. Include as many people as possible in order to have more viewpoints about possible problems on the item under review
- D. Include people who are detail-oriented and scrupulous at finding issues
Answer: C
NEW QUESTION 39
Test Tools and Automation
Assume you are a Test Manager involved in system testing of a CRM application for a Pay-TV company.
Currently the application is able to support a proper number of users assuring the required responsiveness. Since the business is expected to grow, you have been asked to evaluate the ability of the application to grow to support more users while maintaining the same responsiveness.
Which of the following tools would you expect to be the most useful at performing this evaluation?
- A. Static analysis tools
- B. Coverage tools
- C. Performance tools
- D. Test management tools
Answer: C
NEW QUESTION 40
Defect Management
Assume you are working on a defect management process to be used by a software organization to track the current status of the defects reports for several projects.
When a defect is found for investigation a defect report is created in "Opened" state that is the unique initial state. The defect report status has also a unique finale state that is the "Closed" state.
The following state transition diagram describes the states of this defect management process:
where only the initial ("Opened") and final ("Closed") states are indicated while the remaining states (V, W, X, Y, Z) have yet to be named.
Which of the following assignments would you expect to best complete the defect management process?
- A. V= Corrected, W=Assigned, X=Validated, Y=Corrected, Z=Rejected
- B. V=Assigned, W=Corrected , X=Validated, Y=Re-Opened, Z=Rejected
- C. V=Assigned, W=Validated , X=Corrected, Y=Re-Opened, Z=Rejected
- D. V=Rejected , W=Corrected , X=Validated, Y=Re-Opened, Z=Assigned
Answer: B
NEW QUESTION 41
The following is the unique "critical" quality risk item that has been identified:
CR-RSK-1. The GUI of the application might accept non-integer values for the input field designed to get the number of bottles from the user Test analysis for system testing has just begun and the following test conditions have been identified:
TC-SEL-2. Test the selection of the package sizes
TC-SEL-4. Test wrong numbers of bottles for an order
TC-CR-RSK-1. Test the accepted values from the input field designed to get the number of bottles from the user Assume that you have used traceability to determine the logical test cases that cover all the requirements and the single risk item identified in that scenario.
Which of the following is a positive logical test that is complete and correct, and covers the REQ-SEL-4 requirement?
Number of correct responses: 1
K3 2 credits
- A. Select a 6-bottles package, then try to insert 7 bottles; verify that no error messages are displayed
- B. Select a 6-bottles package, then try to insert 5 bottles; verify that no error messages are displayed
- C. Select a 6-bottles package, then try to insert 7 bottles; verify that the "Invalid number of bottles" message is displayed
- D. Select a 6-bottles package, then try to insert 7 bottles
Answer: C
NEW QUESTION 42
Test Management
In the test strategy document your organization declares:
- to adopt a V-model development lifecycle, with three formal levels of testing: unit, integration and system testing
- to use a blended risk-based and regression-averse testing strategy for each level of testing The following is an excerpt of the "approach" section for the system test plan document of a new project:
"Testing will only use manual tests. Due to the short period of time for test execution, the following activities will be performed in parallel with test execution: Test planning, test analysis and test design.
Basic metrics will be taken for test effort (i.e. person-hours), test cases executed (passed/failed), and incidents (no more metrics, such as code coverage, will be collected)." In the system test plan, no deviations from the test strategy are described.
Based only on the given information, which of the following statements is true?
- A. The approach described in the system test plan document is consistent with the regression testing strategy, but it is inconsistent with the risk-based testing strategy
- B. The approach described in the system test plan document is consistent with the test strategy
- C. The approach described the system test plan document is inconsistent with both the risk-based and regression testing strategies
- D. The approach described in the system test plan document is consistent with the risk-based testing strategy, but it is inconsistent with the regression testing strategy
Answer: C
NEW QUESTION 43
......
Tested Material Used To CTAL-TM_Syll2012 Test Engine: https://officialdumps.realvalidexam.com/CTAL-TM_Syll2012-real-exam-dumps.html
