Advance Level CTAL-TTA 最新問題集 2024年06月01日 に更新されました [Q19-Q40]

Share

Advance Level CTAL-TTA最新問題集で2024年06月01日

2024年最新の問題をマスター!Advance Level合格目指そう!CTAL-TTAリアル試験問題集!

質問 # 19
You have been assigned the task of conducting the performance efficiency testing for a new Internet toolbar.
Which of the following would be a valid test condition for this quality characteristic?

  • A. Number of comments in the code
  • B. Usage restrictions based on user access controls
  • C. Number of keystrokes the user must enter to start up the toolbar
  • D. Memory usage

正解:D

解説:
A valid test condition for the performance efficiency testing of a new Internet toolbar is memory usage.
Testing how much memory the toolbar consumes during operation is essential to ensure it does not adversely affect the performance of the host system, particularly when the toolbar is expected to run concurrently with other applications .


質問 # 20
Given the following code:
If x > y and z = 3 statement!
elself z = 4
statement2
endif;
What is the minimum number of tests needed to achieve 100% statement coverage?

  • A. 0
  • B. 1
  • C. 2
  • D. 3

正解:A

解説:
To achieve 100% statement coverage, you need to ensure every executable statement in the code is executed at least once during testing. Given the code:
If x > y and z = 3 statement1 elseif z = 4 statement2 endif;
Two tests are required:
* Test 1: Set x > y and z = 3 to execute statement1.
* Test 2: Set z = 4 (irrespective of the condition x > y) to execute statement2.
With these two tests, both conditions that lead to the execution of statement1 and statement2 are covered.


質問 # 21
Why should security testing include testing for any cross-site scripting vulnerabilities?

  • A. Because encryption codes could be broken
  • B. Because strings could be entered from the Ul that are too long for the code to handle safely
  • C. Because potentially malicious code could be inserted into the system
  • D. Because a "man in the middle" could exist

正解:C

解説:
Cross-site scripting (XSS) vulnerabilities allow attackers to inject malicious scripts into web pages viewed by other users. This type of security breach can lead to unauthorized access to user sessions or sensitive information and manipulate client-side scripts. Testing for XSS vulnerabilities is critical to ensure that any input received from the UI is appropriately sanitized, preventing malicious code from executing within the system. This is a fundamental aspect of security testing to protect the integrity and confidentiality of user data and system functionality.


質問 # 22
An enhancement to a Social Media application allows for the creation of new Groups. Any number of existing application members can be added to a Group. An attempt to add a non-existent member of the application to a Group will result in an error, as will an attempt to add the same member twice. Members can be removed from an existing Group. An existing Group can be deleted but only if there are no current members attached to it.
Which one of the following Keyword-driven input tables provides the BEST test coverage of this enhancement?
Table 1
KeywordGroup IdMember Id
Create.GroupGroup3
Add_MemberGroup3@Member1
Add.MemberGroup3(a)Member2
Delete_GroupGroup3
Remove.MemberGroup3@Memberl
Remove_MemberGroup3@)Member2
Delete.GroupGroup3
Result
Group created
Member added to Group
Member added to Group
Error - Group not empty
Member removed from group
Member removed from group
Group deleted
Table 2
KeywordGroup IdMember IdResult
Create.GroupGrouplGroup created
Add.MemberGrouplMember4Error - member does not exist
Add.MemberGroupl(MemberlMember added to Group
Delete.GroupGrouplError - Group not empty
Remove_Member@Member 1Member removed from group
Delete.GroupGrouplGroup deleted
Table 3
KeywordGroup IdMember IdResult
Create.GroupGroup3Group created
Add.MemberGroup3Member9Error - member does not exist
Add.MemberGroup3(MemberlMember added to Group
Add_MemberGroup 3(MemberlError - member already in group
Delete.GroupGroup3Error - Group not empty
Remove-MemberGroups(Member 1Member removed from group
Delete.GroupGroupsGroup deleted
Table 4
KeywordGroup IdMember IdResult
Create.GroupGrouplGroup created
Add.MemberGroupl@Member3Member added to Group
Add.MemberGroupl@Member3Error - member already in group
Delete.GroupGrouplError - Group not empty
Remove.MemberGroupl@Member1Member removed from group
Delete.GroupGrouplGroup deleted
SELECT ONE OPTION

  • A. Table 1
  • B. Table 2
  • C. Table 4
  • D. Table 3

正解:D

解説:
Table 3 provides the best test coverage for the described scenario, as it includes various key test conditions:
* Attempting to add a non-existent member, resulting in an error.
* Trying to add a member twice to the same group, leading to an error for duplicate entry.
* Removing a member from the group.
* Attempting to delete a group that is not empty, which correctly results in an error, and finally deleting a group when it is empty.
This table most comprehensively covers the functionalities and error handling specified in the enhancement details, effectively testing all scenarios including normal and exceptional behavior .


質問 # 23
Which of the following defect types is NOT an example of a defect type typically found with API testing?

  • A. Data handling issues
  • B. Loss of transactions
  • C. High architectural structural complexity
  • D. Timing problems

正解:C

解説:
In the context of API testing, the defect types generally found are related to the specific interactions with the API, such as issues with data formatting, handling, validation, and the sequencing or timing of API calls.
Architectural structural complexity is not typically a defect that would be identified at the API testing level.
API tests are concerned with the interface and immediate integration points, not the overarching system architecture, which would be more relevant to design or system-level testing.


質問 # 24
You need to implement a Java class that validates a password entry field. The validation critena states that the password must:
1. be a minimum of 8 characters
2 contain at least one special character.
You are focusing on validation criterion 1 and have written a test class that checks that a 7 character password entry will fail validation.
You have written code designed to make this test class pass, however, on first execution of the test class it has failed What should you do next9 SELECT ONE OPTION

  • A. Add code to cover special character validation criterion 2
  • B. Develop a test class with a 9 character password containing one special character and re-execute the code
  • C. Repair the failing code and re-execute it for the test class
  • D. Refactor the failing code to improve its design and structure

正解:C

解説:
When a test class that validates a specific criterion (such as the minimum length of a password) fails, the immediate next step is to repair the failing code and re-execute the test. This approach adheres to the test-driven development (TDD) practices, where the cycle of writing a failing test, making it pass, and then refactoring is repeated. It ensures that each validation criterion is correctly implemented before moving on to additional functionalities or validations .


質問 # 25
Which of the following does NOT contribute to a more effective review preparation by the Technical Test Analyst?

  • A. Review training for the Technical Test Analyst.
  • B. Ensure that participants spend enough time during preparation, e.g.. by managing checking rate (number of pages checked per hour during review preparation).
  • C. Managing logging rate (number of defects logged per minute during the meeting).
  • D. The usage of review checklists.

正解:C

解説:
An effective review preparation by a Technical Test Analyst includes ensuring that participants are well-prepared and that they spend enough time on preparation, which can be managed by checking the rate (option A). The use of review checklists (option C) and providing review training (option D) are also methods that contribute to more effective review preparation. However, managing the logging rate (option B), or the number of defects logged per minute during the meeting, is not related to the preparation phase but rather to the defect detection and logging phase during the actual review meeting. It is not a preparation activity but a review execution activity.


質問 # 26
A component has been analysed during a risk-assessment and rated as highly critical. Which of the following white-box test techniques provides the highest level of coverage and could therefore be used to test this component?

  • A. Statement testing
  • B. Modified condition/decision testing
  • C. Multiple condition testing
  • D. Decision testing

正解:B

解説:
Modified condition/decision testing (MC/DC) provides a higher level of coverage compared to other white-box testing techniques because it requires each condition in a decision to be shown to independently affect that decision's outcome. It is more rigorous than both decision testing (which only requires each decision's possible outcomes to be tested) and statement testing (which requires only each executable statement to be executed). Therefore, for a highly critical component, MC/DC is more appropriate as it ensures a more thorough assessment of the logic in the software component.


質問 # 27
A unit test should be deterministic. Which option correctly describes the meaning of 'deterministic' as a characteristic of a unit test9 SELECT ONE OPTION

  • A. it should not depend on any other test.
  • B. It should be small so that many tests can be run in a short period of time
  • C. Whenever it is run under the same conditions, it should produce the same results.
  • D. It should only test the functionality related to it.

正解:C

解説:
A unit test being 'deterministic' means that whenever it is run under the same conditions, it should produce the same results. This characteristic is crucial for reliable, repeatable testing outcomes that are not influenced by external factors or previous test states .


質問 # 28
Consider the pseudo code provided below:

Given the following tests, what additional test(s) (if any) would be needed in order to achieve 100% statement coverage, with the minimum number of tests?
Test 1: A = 7, B = 7, Expected output: 7
Test 2: A = 7, B = 5, Expected output: 5

  • A. A=6, B=12, Expected output: Bingo!
  • B. A=6, B=12, Expected output: Bingo! and A=7, B=9, Expected output: 7
  • C. A=7, B=9, Expected output: 7
  • D. No additional test cases are needed to achieve 100% statement coverage.

正解:D

解説:
100% statement coverage means that every line of code is executed at least once during testing. Based on the provided pseudo-code and the test cases given:
Test 1 executes the MIN = B statement when A and B are equal.
Test 2 executes the MIN = A statement and skips the inner IF since B is not equal to 2*A.
All statements within the code have been executed by these two tests, hence no additional test cases are needed to achieve 100% statement coverage.


質問 # 29
Which of the following best describes the reason why poorly written code is usually more difficult to maintain than well written code?

  • A. It tends to be difficult for a developer to locate and accurately fix a problem
  • B. It tends to run more slowly, causing performance issues that may be difficult to fix
  • C. It tends to have a lot of internal documentation
  • D. It tends to contain security issues that may require maintenance releases

正解:A

解説:
Poorly written code often lacks clarity, consistency, and may not follow best practices, making it harder to understand and maintain. When code is not well-structured or logically organized, identifying the source of bugs or understanding how changes might affect system behavior becomes more difficult. This issue is compounded when developers other than the original author need to work on the code, as they may struggle to interpret the intended functionality and interdependencies without clear, readable code.


質問 # 30
Why could test cases need to be refactored in an Agile project?
SELECT ONE OPTION

  • A. To maintain bi-directional traceability with the user stories
  • B. To increase the breadth of black box coverage
  • C. To ensure that the tests and code remained aligned
  • D. To make them easier to understand and cheaper to modify

正解:D

解説:
In Agile projects, test cases may need to be refactored to make them simpler and less costly to modify. This is crucial because Agile methodologies prioritize adaptability and frequent changes to the codebase and documentation. Refactoring test cases in this context ensures that they remain aligned with the continuously evolving project requirements, are easier for teams to manage, and can be quickly adjusted to accommodate new or changed functionality without significant rework costs .


質問 # 31
Subject to testing is a software system (COTS) for Project Administration and Control (PACS). PACS is a multi-project system for controlling the project time, e.g., in terms of scheduling and tracking, and managing the productivity of projects, e.g., in terms of effort and deliverables.
During various interviews with stakeholders the following information was gathered:
* Using PACS is not business critical. There is no impact such as high financial losses or problems to the operational continuity of an organization. Its application is not critical since the software package does not support directly the operational, or the primary, business processes of an organization. It supports (project) management in the project planning and tracking process. Of course, it will be highly annoying for users if the system "goes down" from time to time. Although this does not have a high impact for the business process as a whole, the Mean Time Between Failures (MTBF) still needs to be at a good level to be successful in the market.
* Users of PACS typically have an academic educational level, but have no prior experience with this particular type of project management software. The system will be used by a large number of users within an organization.
* The system will be used on a regular basis, e.g., several times per day by project managers and several times per week by project employees. This means that the system will not be used very intensively, often only for some data input or an information request. Its usage is not considered to be very time-critical.
* The data is recorded on-line and real-time. The system is expected to run in multiple hardware environments in various network environments. It is also expected that changes in the operational environments will happen in the upcoming period that also need to be supported.
Based on the information provided by the stakeholder, which combination of non-functional quality characteristics should you propose to test as part of your test approach?

  • A. Reliability and Performance efficiency
  • B. Reliability and Portability
  • C. Performance efficiency and Portability
  • D. Security and Reliability

正解:B

解説:
Given the stakeholder information provided:
Reliability is important because the system, while not business-critical, still needs a good MTBF to be successful in the market. This is directly mentioned in the stakeholder information.
Portability is essential as the system is expected to run in multiple hardware environments and various network environments, with changes anticipated in the operational environments.
Security is not highlighted as a concern, and performance efficiency, while generally important, is less critical as the system is not used intensively and is not time-critical. Therefore, reliability and portability are the most relevant non-functional quality characteristics to test in this scenario.


質問 # 32
You are working for a video game manufacturer You have a new title being released Market interest in the product is at an all time high and everyone in the company has been promised huge bonuses if the launch is successful You are responsible for portability testing Which area, m particular should you emphasize in your testing?

  • A. Analyzability
  • B. Replaceability
  • C. Installability
  • D. Learnability

正解:C

解説:
In portability testing for a video game that is anticipated to be highly popular, the key area to emphasize is installability. This involves ensuring that the game can be successfully installed across different platforms and configurations that potential players might use. Focusing on installability helps minimize technical barriers to entry, crucial for a successful launch and widespread adoption of the game .


質問 # 33
As a technical test analyst, you are involved in a risk analysis session using the Failure Mode and Effect Analysis technique. You are calculating risk priorities. Which of the following are the major factors in this exercise?

  • A. Likelihood and impact
  • B. Severity and priority
  • C. Functionality, reliability, usability, maintainability, efficiency and portability
  • D. Financial damage, frequency of use and external visibility

正解:A

解説:
Failure Mode and Effect Analysis (FMEA) is a structured approach to identify and address potential failures in a system, product, process, or service. The major factors involved in calculating risk priorities in FMEA are typically the severity of the potential failure, its likelihood of occurrence, and the ability to detect it. These factors are usually combined to form a Risk Priority Number (RPN) for each potential failure mode identified.
However, the specific factors mentioned in the options like functionality, reliability, usability, maintainability, efficiency, and portability are quality characteristics that could be considered in an FMEA analysis but are not directly used for calculating risk priorities. Likewise, financial damage, frequency of use, and external visibility might influence the severity or impact of a failure, but they are not standard factors in calculating risk priorities in the context of FMEA. Therefore, the most relevant factors for calculating risk priorities in an FMEA context would typically be the likelihood of the failure occurring and its potential impact, which aligns with option C: Likelihood and impact.
It's important to note that while these explanations are based on general principles and practices related to fault seeding and FMEA, the specifics might vary slightly in different contexts or with different methodologies.


質問 # 34
You have identified existing test cases that require re-factoring, Which is the NEXT task you should perform?
SELECT ONE OPTION

  • A. Re run the tests to ensure that the test results remain the same
  • B. Adjust the observable behavior of the tests to meet the user stories
  • C. Analyze the Impact of the functionality of the current iteration on the existing regression tests
  • D. Make changes to the internal structure of the tests to improve maintainability

正解:D

解説:
Once existing test cases have been identified for refactoring, the next step is typically to make changes to the internal structure of these tests to improve their maintainability. This involves revising the code or scripts to make them cleaner, more efficient, and easier to understand, which helps in maintaining them over time as the software evolves. This process may also involve updating test data or dependencies to ensure that the tests remain robust and reliable .


質問 # 35
A new Payroll system calculates the amount of tax that each employee must pay (TaxToPay) on their gross monthly salary (in (), and the net salary (NetSal) that they will receive after that amount of tax has been deducted It also calculates the amounts of tax (TaxPdYTD) and net salary (SalPdYTD) paid in the year to date (YTD) by adding them to the stored amounts from last month (for month 1 these will be zero), inputs Include Employee id (Empid) and Gross Salary this month (GrossSal). Tax Rate is looked up on the key of Employee Id, the amounts of tax and net salary paid in the year to date are looked up on the key of (Employee Id and
[month * 1]) except that for month 1 they will be zero.
if both employees were paid the same in month 1 as in the current month 2. for which tax has now to be calculated, which data-driven input and expected output table is correct for this situation?
Table 1
MonthEmpidGrossSalTaxRateTaxToPayNetSalTaxPdYTD
212000153001700600
222200204401760880
Table 2
MonthEmpidGrossSalTaxRateTaxToPayNetSalSalPdYTD
2120000.153001700600
2222000.24401760880
Table 3
MonthEmpidGrossSalTaxToPayNetSalTaxPdYTDSalPdYTD
11200030017006003400
12220044017608803520
Table 4
MonthEmpidGrossSalTaxToPayNetSalTaxPdYTDSalPdYTD
21200030017006003400
22220044017608803520
SELECT ONE OPTION

  • A. Table 1
  • B. Table 3
  • C. Table 2
  • D. Table 4

正解:C

解説:
Table 2 correctly represents the calculation of tax to pay and net salary for employees of a Payroll system, including accurate representation of tax rates as percentages (not whole numbers), and the correct year-to-date accumulation of salary paid, which aligns with the payroll system's operations as described. It accounts for the logical incrementation of cumulative figures and uses percentage representations for tax rates, which is a standard approach in payroll calculations .


質問 # 36
Assume you are involved in testing a Health Insurance Calculation system.
At the main screen one can enter information for a new client. The information to be provided consists of last name, first name and date of birth. After confirmation of the information, the system checks the age of the potential new client and calculates a proposed premium.
The system also has the option to request information for an existing client, using the client's ID number.
A keyword-driven automation approach is being used to automate most of the regression testing.
Based on the information provided, which TWO of the options provided would be the MOST LIKELY keywords for this application? (Choose two.)

  • A. Enter_Client
  • B. Exclude_Client
  • C. Remove_Client
  • D. Select_Client
  • E. Print_Premium

正解:A、D

解説:
Considering the functionalities described for the Health Insurance Calculation system, the keywords would represent the main actions that can be performed in the system. 'Enter_Client' would be a keyword for entering new client information, which is a primary feature of the system as described. 'Select_Client' would be used to retrieve information for an existing client using the client's ID number, which is another main functionality. Other options such as 'Remove_Client', 'Print_Premium', and 'Exclude_Client' are not explicitly mentioned in the provided system functionalities, therefore, 'Enter_Client' and 'Select_Client' are the most likely keywords for automation.


質問 # 37
The following characteristics were identified during an early product risk-assessment for a software system:
* the software system needs to manage synchronization between various processes
* microcontrollers will be used that will limit product performance
* the hardware that will be used will make use of timeslots
* the number of tasks supported in parallel by the software system is large and are often highly complex.
Based on the information provided, which of the following non-functional test types is MOST appropriate to be performed?

  • A. Portability testing
  • B. Security testing
  • C. Maintainability testing
  • D. Time-behaviour testing

正解:D

解説:
The characteristics listed in the question point towards the need to manage synchronization between processes and make efficient use of limited hardware resources, such as microcontrollers and timeslots. Additionally, the complexity and concurrency of tasks highlight the importance of the software's performance over time.
Time-behaviour testing is the most appropriate non-functional test type to perform in this scenario as it focuses on evaluating the timing aspects of the system, such as response times, processing times, and throughput rates.
It ensures that the system meets its time-related requirements, which is critical for systems reliant on synchronization and limited by hardware performance constraints.


質問 # 38
You are involved in testing a system in the medical domain. Testing needs to comply with the FDA requirements and is rated as being safety critical. A product risk assessment has been performed and various mitigation actions have been identified. Reliability testing is one of the test types that needs to be performed throughout the development lifecycle.
Based on the information provided, which of the following activities would need to be addressed in the test plan?

  • A. Design and execution of test cases for scalability.
  • B. Perform a vulnerability scan.
  • C. Design and execution of specific tests that evaluate the software's tolerance to faults in terms of handling unexpected input values.
  • D. Testing whether the installation/de-installation can be completed.

正解:C

解説:
In the context of safety-critical systems, particularly in the medical domain, reliability is of utmost importance. For such systems, it is crucial to ensure that the software can handle unexpected input values and continue to operate without failure. This is essential to ensure patient safety and compliance with FDA requirements. Vulnerability scans (option A) are more related to security testing, whereas scalability (option C) and installation/de-installation (option D) are important but not specifically related to the reliability and safety criticality of the system in the medical domain.


質問 # 39
Which statement correctly describes service virtualization''
SELECT ONE OPTION

  • A. It is a shareable testing service that simulates the behavior, data and performance of a system or service to which the product or component under test would normally be connected
  • B. It is a service which automatically deploys new versions of the software into the production environment at regular and short intervals
  • C. it is a collection of mock objects such as stubs and drivers that will allow a product or component to run without some other product or component that it would normally need
  • D. it is an integrated set of tools that will automatically compile, test and deliver into a virtual environment a new build of the product under test

正解:A

解説:
Service virtualization is used in test environments to simulate the behaviors, data, and performance characteristics of dependent systems that are not available for testing due to limitations such as cost, access, or complexity. This allows for more thorough testing of the product under test in a controlled, stable environment that mimics real-world conditions without the need for actual live systems .


質問 # 40
......

完全版は2024年最新のCTAL-TTA試験問題集テストガイドはトレーニング専門PassTest:https://www.passtest.jp/ISTQB/CTAL-TTA-shiken.html

合格準備CTAL-TTAにはPassTestが提供するあなたをCertified Tester Advanced Level Technical Test Analyst試験合格させます顕著練習問題:https://drive.google.com/open?id=1JbkQzauzMlo_6-sUbrjFtHpm6Gujn3V4