ISTQB - Section 3

Defects discovered by static analysis tools include:

i. Variables that are never used.

ii. Security vulnerabilities.

iii. Programming Standard Violations

iv. Uncalled functions and procedures

• i , ii, iii, iv are all correct

• iii is correct; i, ii, iv are incorrect.

• i , iii , iv , ii are all incorrect

• iv, ii are correct

Success Factors for a review include:

i. Each Review does not have a predefined objective

ii. Defects found are welcomed and expressed objectively

iii. Management supports a good review process.

iv. There is an emphasis on learning and process improvement.

• ii, iii, iv are correct and i is incorrect

• i, iii, iv are correct and ii is incorrect

• i, ii, iii, iv are incorrect

• ii is correct

What can static analysis NOT find?

• The use of a variable before it has been defined

• Unreachable (“dead”) code

• Whether the value stored in a variable is correct

• The re-definition of a variable before it has been used

Given the following types of tool, which tools would typically be used by developers and which

by an independent test team:

i. static analysis

ii. performance testing

iii. test management

iv. dynamic analysis

v. test running

vi. test data preparation

• developers would typically use i, iv and vi; test team ii, iii and v

• developers would typically use i and iv; test team ii, iii, v and vi

• developers would typically use i, ii, iii and iv; test team v and vi

• developers would typically use ii, iv and vi; test team I, ii and v

• developers would typically use i, iii, iv and v; test team ii and vi

Unreachable code would best be found using:

• code reviews

• code inspections

• a coverage tool

• a test management tool

• a static analysis tool

Which of the following is true about Formal Review or Inspection:

i. Led by Trained Moderator (not the author).

ii. No Pre Meeting Preparations

iii. Formal Follow up process.

iv. Main Objective is to find defects

• ii is true and i, iii, iv are false

• i, iii, iv are true and ii is false

• i, iii, iv are false and ii is true

• iii is true and i, ii, iv are false

Which of the following is a static test?

• code inspection

• coverage analysis

• usability assessment

• installation test

Static analysis is best described as:

• the analysis of batch programs.

• the reviewing of test plans.

• the analysis of program code.

• the use of black box testing.

Why are static testing and dynamic testing described as complementary?

• Because they share the aim of identifying defects and find the same types of defect.

• Because they have different aims and differ in the types of defect they find.

• Because they have different aims but find the same types of defect.

• Because they share the aim of identifying defects but differ in the types of defect they find.

Which of the following statements regarding static testing is false:

• static testing requires the running of tests through the code

• static testing includes desk checking

• static testing includes techniques such as reviews and inspections

• static testing can give measurements such as cyclomatic complexity