SQA DojoISTQB Exam Prep

ISTQB Practice Test 3: 40 Questions with Answers

Paper 3 is the closest of the three to a dress rehearsal, and carries the most application-level questions. Its test management block - risk-based testing, estimation, defect reports and test progress - is the heaviest of the three papers, which mirrors where marks are most often lost on the real exam.

All 40 questions are on this page with their answers and explanations, so you can work through them at your own pace. This paper is fixed and shares no questions with the other two papers, so a second attempt measures what you have learned rather than what you have memorised.

What is in this paper

By cognitive level: 9 K1 (recall), 26 K2 (understanding) and 5 K3 (application). The real exam is weighted roughly 20% K1, 60% K2 and 20% K3, with a 65% pass mark over 60 minutes.

How to get the most from this paper

Save this paper for the week before you sit the real thing. By then the terminology should be automatic, and what you want to test is whether you can still apply a technique under time pressure when the question does not tell you which technique to use.

Prefer exam conditions?

Sit this paper against a 60-minute clock, one question at a time, with the answers hidden until you submit. Your score is marked against the 65% pass threshold.

Practice Test 3 questions and answers

Each question shows its options first. Open the toggle to see the correct answer and why it is correct.

  1. 1. Which factor MOST directly influences how the test process is carried out in a given organisation?

    Cognitive level K2
    • A.The template used to format the test plan document
    • B.The level of risk and the regulatory requirements the product is subject to
    • C.The alphabetical order in which requirements are documented
    • D.The number of testers who hold a certification
    Show answer and explanation

    Correct answer: B. The level of risk and the regulatory requirements the product is subject to

    1.4.2 lists business domain factors - criticality of the test object, identified risks, market needs and specific legal regulations - among the contextual factors that determine how testing is carried out.

  2. 2. Why does finding a defect during requirements review cost less than finding it during system testing?

    Cognitive level K2
    • A.System testing is charged at a higher hourly rate
    • B.Requirements reviews are always automated and therefore cheaper
    • C.Defects found in requirements are always less severe
    • D.The defect has not yet propagated into design, code and other derived work products
    Show answer and explanation

    Correct answer: D. The defect has not yet propagated into design, code and other derived work products

    A defect corrected in a requirement affects only that requirement. Once it has been designed, coded and tested against, correcting it means reworking everything derived from it.

  3. 3. What is the relationship between testing and quality control?

    Cognitive level K1
    • A.Testing is a major form of quality control
    • B.Quality control is a subset of testing
    • C.Testing and quality control are unrelated disciplines
    • D.Quality control is process oriented and preventive
    Show answer and explanation

    Correct answer: A. Testing is a major form of quality control

    1.2.2 states that testing is a major form of quality control, alongside others such as formal methods, simulation and prototyping.

  4. 4. A failure has been triggered by dynamic testing. What does the typical debugging process involve?

    Cognitive level K2
    • A.Root cause analysis, process improvement, and retesting
    • B.Diagnosis, fixing the defect, and closing the defect report
    • C.Reproduction of the failure, diagnosis to find the defect, and fixing the defect
    • D.Reproduction of the failure, confirmation testing, and regression testing
    Show answer and explanation

    Correct answer: C. Reproduction of the failure, diagnosis to find the defect, and fixing the defect

    Section 1.1.2 states that when dynamic testing triggers a failure, the typical debugging process involves reproduction of a failure, diagnosis (finding the defect), and fixing the defect.

  5. 5. In what sense does testing provide users with indirect representation on a development project?

    Cognitive level K2
    • A.Testers ensure users' needs are considered throughout the lifecycle
    • B.Users are given direct access to the test environment throughout the project
    • C.A representative set of users is recruited onto the development team
    • D.Testers are formally appointed as proxies by the user community
    Show answer and explanation

    Correct answer: A. Testers ensure users' needs are considered throughout the lifecycle

    Section 1.2.1 states that testing provides users with indirect representation, because testers ensure their understanding of users needs is considered throughout the development lifecycle. The alternative, involving a representative set of users in the project, is not usually possible because of high costs and the lack of availability of suitable users.

  6. 6. Stubs, drivers, simulators and service virtualizations are examples of which testware?

    Cognitive level K1
    • A.Test implementation work products
    • B.Test planning work products
    • C.Test design work products
    • D.Test analysis work products
    Show answer and explanation

    Correct answer: A. Test implementation work products

    Section 1.4.3 lists test environment items among the test implementation work products, and gives stubs, drivers, simulators and service virtualizations as examples.

  7. 7. Why is domain knowledge listed as a skill that is particularly relevant for testers?

    Cognitive level K2
    • A.So that the tester can identify defects that are difficult to find
    • B.So that the tester can select appropriate test tools
    • C.So that the tester can understand and communicate with end users and business representatives
    • D.So that the tester can work without any test documentation
    Show answer and explanation

    Correct answer: C. So that the tester can understand and communicate with end users and business representatives

    Section 1.5.1 lists domain knowledge as a skill particularly relevant for testers, so as to be able to understand and to communicate with end users and business representatives.

  8. 8. On what do typical test objectives depend?

    Cognitive level K1
    • A.The test environment configuration and the tools available
    • B.The number of defects found in the previous release
    • C.The test techniques chosen and the level of certification held by the testers
    • D.The work product being tested, the test level, risks, the SDLC being followed, and business factors such as time to market
    Show answer and explanation

    Correct answer: D. The work product being tested, the test level, risks, the SDLC being followed, and business factors such as time to market

    Section 1.1.1 states that test objectives can vary depending upon the context, which includes the work product being tested, the test level, risks, the SDLC being followed, and factors related to the business context such as corporate structure, competitive considerations or time to market.

  9. 9. What distinguishes white-box testing from black-box testing at the component test level?

    Cognitive level K2
    • A.White-box testing measures response time
    • B.Black-box testing cannot be applied at component level
    • C.White-box testing derives tests from the internal structure of the component; black-box from its specification
    • D.White-box testing is performed only by testers
    Show answer and explanation

    Correct answer: C. White-box testing derives tests from the internal structure of the component; black-box from its specification

    The basis for deriving tests is the distinction, and it holds at every test level, not only at component level.

  10. 10. Which TWO of the following are examples of shift-left practices?

    Cognitive level K2

    Choose 2.

    • A.Running the full regression suite only before release
    • B.Deferring all non-functional testing until user acceptance testing
    • C.Reviewing requirements and user stories before implementation begins
    • D.Writing automated component tests alongside the code
    Show answer and explanation

    Correct answer: C. Reviewing requirements and user stories before implementation begins | D. Writing automated component tests alongside the code

    Static testing of work products is a shift-left practice: defects are found before any code exists.

    Testing at the component level as the code is written moves defect detection earlier than a later test level would.

  11. 11. A system is being decommissioned. Which testing is MOST relevant?

    Cognitive level K2
    • A.Maintenance testing triggered by retirement, including testing of data archiving and of restore and retrieval procedures
    • B.Component testing of newly written code
    • C.Confirmation testing of previously reported defects
    • D.Alpha testing at the developing organisation's site
    Show answer and explanation

    Correct answer: A. Maintenance testing triggered by retirement, including testing of data archiving and of restore and retrieval procedures

    Retirement is one of the three named triggers for maintenance testing. Where long retention periods apply, testing covers data archiving and the restore and retrieval procedures used during the archiving period.

  12. 12. Which defect type is MOST typically found by system integration testing?

    Cognitive level K2
    • A.A timeout when the system exchanges data with an external service
    • B.A missing index causing a slow query
    • C.An incorrect calculation inside a single method
    • D.A confusing label on a form
    Show answer and explanation

    Correct answer: A. A timeout when the system exchanges data with an external service

    Section 2.2.1 states that system integration testing focuses on testing the interfaces of the system under test and other systems and external services, which is exactly where this defect appears.

  13. 13. What effect does shift left typically have on project effort and cost?

    Cognitive level K2
    • A.It moves cost from testing to development without changing the total
    • B.It has no effect on cost, only on the timing of defect detection
    • C.It reduces effort and cost at every stage of the process
    • D.It may add training, effort or cost earlier in the process, but is expected to save effort or cost later
    Show answer and explanation

    Correct answer: D. It may add training, effort or cost earlier in the process, but is expected to save effort or cost later

    Section 2.1.5 states that shift left might result in extra training, effort and/or costs earlier in the process but is expected to save efforts and/or costs later in the process.

  14. 14. Which of the following is used to distinguish one test level from another?

    Cognitive level K1
    • A.The test basis and the responsibilities for performing the testing
    • B.The programming language the test object is written in
    • C.The number of testers assigned to the level
    • D.The test management tool in use
    Show answer and explanation

    Correct answer: A. The test basis and the responsibilities for performing the testing

    Section 2.2.1 lists the attributes that distinguish test levels: test object, test objectives, test basis, defects and failures, and approach and responsibilities.

  15. 15. Which statement about the relationship between functional and non-functional tests is TRUE?

    Cognitive level K2
    • A.Many non-functional tests are derived from functional tests, checking that a non-functional constraint is satisfied while the function is performed
    • B.Non-functional testing is a test level rather than a test type
    • C.Non-functional testing can only begin once all functional testing has passed
    • D.Functional and non-functional tests must always be executed by separate teams
    Show answer and explanation

    Correct answer: A. Many non-functional tests are derived from functional tests, checking that a non-functional constraint is satisfied while the function is performed

    Section 2.2.2 states that many non-functional tests are derived from functional tests as they use the same functional tests but check that, while performing the function, a non-functional constraint is satisfied, for example that a function performs within a specified time.

  16. 16. Which of the following is one of the non-functional quality characteristics classified by ISO/IEC 25010?

    Cognitive level K1
    • A.Traceability
    • B.Reusability
    • C.Testability
    • D.Safety
    Show answer and explanation

    Correct answer: D. Safety

    Section 2.2.2 lists the ISO/IEC 25010 non-functional quality characteristics as performance efficiency, compatibility, usability, reliability, security, maintainability, portability and safety.

  17. 17. What distinguishes a technical review from a walkthrough?

    Cognitive level K2
    • A.A technical review is led by a facilitator and performed by technical peers, while a walkthrough is led by the author
    • B.Only a walkthrough can examine requirements
    • C.A technical review is always informal
    • D.A walkthrough always collects metrics; a technical review does not
    Show answer and explanation

    Correct answer: A. A technical review is led by a facilitator and performed by technical peers, while a walkthrough is led by the author

    Both types can detect anomalies, so the difference lies in who runs the session and who takes part. A walkthrough is led by the author of the work product, whereas a technical review is led by a moderator and carried out by technically qualified reviewers, aiming at consensus and decisions on a technical problem.

  18. 18. Which statement about static analysis tools is TRUE?

    Cognitive level K2
    • A.They can detect coding standard violations and control or data flow anomalies without executing the code
    • B.They execute the code in a controlled environment
    • C.They can only be used after system testing
    • D.They replace the need for reviews
    Show answer and explanation

    Correct answer: A. They can detect coding standard violations and control or data flow anomalies without executing the code

    Static analysis tools inspect source code directly, which is how they find unreachable code, unused variables and standard violations.

  19. 19. Which of the following would NOT be a success factor for a review?

    Cognitive level K1
    • A.Keeping each review session to a manageable size
    • B.Using the review to evaluate the performance of the author
    • C.Providing adequate time for individual preparation
    • D.Setting clear objectives agreed in advance
    Show answer and explanation

    Correct answer: B. Using the review to evaluate the performance of the author

    Evaluating participants must never be an objective of a review; doing so discourages honesty and undermines the review.

  20. 20. A requirement states "the system shall respond quickly". Which type of defect is this, and which testing approach finds it earliest?

    Cognitive level K2
    • A.An ambiguity in the requirement, found earliest by static testing
    • B.Not a defect, because performance requirements are always subjective
    • C.A performance defect, found earliest by load testing
    • D.A defect in the test basis that only acceptance testing can reveal
    Show answer and explanation

    Correct answer: A. An ambiguity in the requirement, found earliest by static testing

    "Quickly" is not measurable, so the requirement is untestable. Only examining the work product can reveal this, and it can be done before any code exists.

  21. 21. In an inspection, which role can the author NOT take?

    Cognitive level K1
    • A.Manager
    • B.Review leader or scribe
    • C.No role is restricted for the author
    • D.Reviewer
    Show answer and explanation

    Correct answer: B. Review leader or scribe

    In an inspection the author cannot act as the review leader or the scribe, which preserves the objectivity the most formal review type depends on.

  22. 22. During which review activity is the work product accepted once the exit criteria are reached?

    Cognitive level K1
    • A.Review planning
    • B.Individual review
    • C.Review initiation
    • D.Fixing and reporting
    Show answer and explanation

    Correct answer: D. Fixing and reporting

    Defects are corrected during fixing and reporting, and the exit criteria for the review are evaluated at that point.

  23. 23. For the state model shown, what is the MINIMUM number of test cases required to achieve 100% valid transition (0-switch) coverage?

    Cognitive level K3

    Order handling state model:

    paycanceldispatchrefundreorderNewShippedPaidCancelled
    • A.Four
    • B.Two
    • C.Five
    • D.One
    Show answer and explanation

    Correct answer: B. Two

    New-Paid-Shipped-New-Cancelled covers four transitions, and New-Paid-Cancelled covers the fifth. One test case may traverse several transitions, so five transitions do not require five test cases.

  24. 24. What is the relationship between statement coverage and branch coverage?

    Cognitive level K2
    • A.100% statement coverage guarantees 100% branch coverage
    • B.They are equivalent criteria
    • C.100% branch coverage guarantees 100% statement coverage, but not the reverse
    • D.Neither implies anything about the other
    Show answer and explanation

    Correct answer: C. 100% branch coverage guarantees 100% statement coverage, but not the reverse

    Branch coverage subsumes statement coverage: exercising every branch necessarily executes every statement, while the reverse does not hold.

  25. 25. A variable has 5 equivalence partitions. Test cases exercise 3 of them. What equivalence partition coverage has been achieved?

    Cognitive level K3
    • A.40%
    • B.100%
    • C.60%
    • D.50%
    Show answer and explanation

    Correct answer: C. 60%

    Coverage is the number of coverage items exercised divided by the total, expressed as a percentage: 3 of 5 partitions is 60%.

  26. 26. Which format expresses an acceptance criterion as a scenario using a Given / When / Then structure?

    Cognitive level K2
    • A.Rule-oriented
    • B.Coverage-oriented
    • C.Scenario-oriented
    • D.Risk-oriented
    Show answer and explanation

    Correct answer: C. Scenario-oriented

    Scenario-oriented acceptance criteria are written as scenarios, commonly in the Given / When / Then form, which maps readily onto test cases.

  27. 27. A module has 20 executable statements. A test suite executes 15 of them. What statement coverage has been achieved?

    Cognitive level K3
    • A.75%
    • B.100%
    • C.60%
    • D.25%
    Show answer and explanation

    Correct answer: A. 75%

    Statement coverage is executed statements divided by total executable statements: 15 of 20 is 75%.

  28. 28. What typically follows a session-based exploratory test session?

    Cognitive level K2
    • A.Immediate release of the test object
    • B.A formal inspection of the test charter
    • C.Automatic generation of a regression suite
    • D.A debriefing between the tester and interested stakeholders
    Show answer and explanation

    Correct answer: D. A debriefing between the tester and interested stakeholders

    The session is usually followed by a debriefing that discusses the results of the session with stakeholders.

  29. 29. Which of the following should NOT be included in a checklist used for checklist-based testing?

    Cognitive level K2
    • A.A question referring to a requirement
    • B.An item that can be checked automatically
    • C.A question about a graphical interface property
    • D.A question referring to a quality characteristic
    Show answer and explanation

    Correct answer: B. An item that can be checked automatically

    Checklists should not contain items that can be checked automatically, items better suited as entry or exit criteria, or items that are too general.

  30. 30. Which TWO of the following does a tester draw on when applying error guessing?

    Cognitive level K2

    Choose 2.

    • A.The order of rules in a decision table
    • B.How the application has worked in the past
    • C.The types of errors developers tend to make and the defects that result
    • D.The statement coverage achieved by the current suite
    Show answer and explanation

    Correct answer: B. How the application has worked in the past | C. The types of errors developers tend to make and the defects that result

    Prior behaviour of the application under test is one of the named sources of knowledge for error guessing.

    Error guessing draws on knowledge of the mistakes developers commonly make and what defects follow from them.

  31. 31. Which test object requires most attention?

    Cognitive level K3
    • A.Documentation
    • B.Simple code
    • C.Old stable code
    • D.Frequently changed code
    Show answer and explanation

    Correct answer: D. Frequently changed code

    Defects cluster, and frequently changed code carries the highest risk of newly introduced defects.

  32. 32. Which is part of configuration management?

    Cognitive level K2
    • A.Version control
    • B.Test execution
    • C.Test planning
    • D.Defect reporting
    Show answer and explanation

    Correct answer: A. Version control

    Configuration management uniquely identifies and version-controls testware so tests can be reproduced against a known version.

  33. 33. What is risk-based testing?

    Cognitive level K3
    • A.Ignoring low-risk areas
    • B.Testing everything equally
    • C.Testing based on highest risks
    • D.Only testing new features
    Show answer and explanation

    Correct answer: C. Testing based on highest risks

    Risk-based testing uses product risk analysis to decide what to test, how deeply, and in what order.

  34. 34. What is the purpose of test estimation?

    Cognitive level K2
    • A.Execute test cases
    • B.Predict effort/resources
    • C.Write code
    • D.Fix defects
    Show answer and explanation

    Correct answer: B. Predict effort/resources

    Test estimation predicts the effort and resources testing will require, informing the plan and the schedule.

  35. 35. What are the two parts of product risk analysis?

    Cognitive level K2
    • A.Risk mitigation and risk transfer
    • B.Risk identification and risk assessment
    • C.Risk monitoring and risk reporting
    • D.Risk acceptance and contingency planning
    Show answer and explanation

    Correct answer: B. Risk identification and risk assessment

    Product risk analysis consists of risk identification, which generates a comprehensive list of risks, and risk assessment, which categorises them and determines likelihood, impact and priority.

  36. 36. What is the difference between entry criteria and exit criteria?

    Cognitive level K2
    • A.They are two names for the same set of conditions
    • B.Entry criteria define what must be in place before an activity can start; exit criteria define what must be true before it can be considered complete
    • C.Entry criteria are optional and exit criteria are mandatory
    • D.Entry criteria apply to testers and exit criteria apply to developers
    Show answer and explanation

    Correct answer: B. Entry criteria define what must be in place before an activity can start; exit criteria define what must be true before it can be considered complete

    The two bracket a test activity: one governs readiness to begin, the other readiness to stop.

  37. 37. Which statement about the test execution schedule is TRUE?

    Cognitive level K2
    • A.It defines the order in which test suites are to be run
    • B.It records the defects found during execution
    • C.It is fixed once written and cannot be re-ordered
    • D.It replaces the need for a test plan
    Show answer and explanation

    Correct answer: A. It defines the order in which test suites are to be run

    Once test cases and procedures are assembled into test suites, the execution schedule sets the order in which those suites run.

  38. 38. In the testing quadrants model, which two viewpoints combine to define the four quadrants?

    Cognitive level K2
    • A.Black-box versus white-box, and static versus dynamic
    • B.Functional versus non-functional, and manual versus automated
    • C.Business facing versus technology facing, and supporting the team versus critiquing the product
    • D.High risk versus low risk, and early versus late
    Show answer and explanation

    Correct answer: C. Business facing versus technology facing, and supporting the team versus critiquing the product

    The combination of these two viewpoints determines the four quadrants of the model.

  39. 39. What does the process of preparing a test plan force testers to confront?

    Cognitive level K2
    • A.The number of defects the release will contain
    • B.The exact wording of every test case
    • C.Future challenges related to risks, schedules, people, tools, costs and effort
    • D.Which developers are responsible for past defects
    Show answer and explanation

    Correct answer: C. Future challenges related to risks, schedules, people, tools, costs and effort

    The syllabus describes planning as guiding testers' thinking and forcing them to confront these challenges in advance.

  40. 40. Which benefit of test automation relates MOST directly to the objectivity of results?

    Cognitive level K1
    • A.Lower licence costs
    • B.Reduction of repetitive manual work
    • C.Easier access to information about testing
    • D.More objective assessment, such as measuring coverage
    Show answer and explanation

    Correct answer: D. More objective assessment, such as measuring coverage

    A tool measures the same way every time, removing the variability and subjectivity of a person assessing coverage by hand.

Keep practising