Font size
WorksheetsSIA 101 (Week 15)
Total questions: 75
Worksheet time: 1hrs 1mins
These are the top priority for the project to be successful EXCEPT:
Preparation
Timeline
Cost
Quality Goals
This will be eliminated when program goals are being assessed and managers choose the best solution.
Challenges
Deadlines
Budget
Roadblocks
These are essential factors to be implemented to meet work requirement EXCEPT:
Expectations
Teamwork
Collaboration
Cooperative
They monitor the framework processes together with the configuration management personnel.
Senior Manager
Product Team
Quality Assurance Team
Program Managers
It defines program goals with respect to how such targets are to be met.
Program Priorities
System Targets
Scope
Software Disciplines
This may impact the team's risk evaluation, configuration management and quality capabilities and defines the tasks and processes to be carried out to accomplish.
Budget
Scope
Quality
Planned Schedule
Importance of system integration
Improve system security
Real time data
An integrated future
Easier for administrators
How to use a Gantt Chart
Determine tasks and subtasks.
Identify task connections.
Create a timeline.
Order tasks and Build your Gantt chart.
Assign tasks, resources, and progress to team members.
Chart your progress.
Which of the following are practiced in level 3 thinking during testing?
Testing is a mental discipline, everyone in the organization strives to test thoroughly.
Testing is done by developers, to debug their code.
Testing is done to identify failures and reduce risks.
Testing is done to show absence of errors.
Which of the following lists difference between verification and validation?
Verification is done during software development whereas validation is done at the end of software development.
Verification is done to ensure that a software works correctly whereas validation is done to ensure all requirements are met.
Which of the following is correct?
Failure leads to fault.
Fault leads to failure.
Fault leads to an error,which in turn leads to failure.
Fault and the error are the same, any of them can lead to failure.
When do we say that a test case has passed?
When the test case executes without any error.
When the test case executes and an output is produced.
When the test case executes and output produced matches the expected output.
When the test case executes and output produced can be traced to a requirement.
Which of the following best defines usability testing?
Testing done to ensure that the system looks nice.
Testing done to ensure that the system is fast enough.
Testing done to ensure that the system is available for all users.
Testing done to ensure that the user interface is as specified.
Which of the following is a list of white box testing techniques?
Unit testing, Performance testing.
Integration testing, Stress testing.
Unit testing, Integration testing.
Usability testing, Performance testing.
When an expected result is not specified in test case template then ___________.
We cannot run the test.
It may be difficult to repeat the test.
It may be difficult to determine if the test has passed or failed.
We cannot automate the user inputs.
Test cases are created in which phase?
Test Specification
Test Planning
Test Requirement
Test Configuration
What is an Equivalence Partition (also known as an Equivalence class)?
A set of test cases for testing classes of objects
An input or output range of values such that only one value in the range becomes a test case
An input or output range of values such that each value in the range becomes a test case
An input or output range of values such that every tenth value in the range becomes a test case.
A Type of Functional Testing, which investigates the functions relating to the detection of threats, such as viruses from malicious outsiders.
Security Testing
Recovery Testing
Performance Testing
Functionality Testing
Which of the following is not a part of the Test Implementation and Execution Phase
Creating test suites from the test cases
Executing test cases either manually or by using test execution tools
Comparing actual results
Designing the Tests
Test Conditions are derived from:
Specifications
Test Cases
Test Data
Test Design
Which of the following is not the integration strategy?
Design based
Big-bang
Bottom-up
Top-down
Functional system testing is:
testing that the system functions with other systems
testing that the components that comprise the system function together
testing the end to end functionality of the system as a whole
testing the system performs functions within specified response times
Which of the following is true
Testing is the same as quality assurance
Testing is a part of quality assurance
Testing is not a part of quality assurance
Testing is same as debugging
Software testing activities should start
as soon as the code is written
during the design stage
when the requirements have been formally documented
as soon as possible in the development life cycle
Check below the different types of performance testing.
Stress Testing
Load Testing
Black Box Testing
Scalability Testing
Functional Regression
Choose correct statement
IEEE is a standard association; shorten for Institute of Electrical and Electronics Engineers
Verification is "do the thing right"
Validation is "do the right thing"
Quality Assurance focuses on process following while Quality Control focuses on deliverable's quality
What are the different types of Functional Testing?
Software testing methodologies are strategies used to test any product to ensure it behaves and looks as expected?
True
False
What kind of test involves testing the application against the business requirements.
Non-Functional Testing
Functional Testing
Product Testing
Unit Testing
What test method incorporates all test types focused on the operational aspects of a piece of software?
Non-Functional Testing
Performance Testing
Product Testing
Unit Testing
Select 2 testing methods under Functional methods
Unit Testing
Security Testing
System Testing
Compatibility Testing
Select 2 testing methods under Non-Functional methods
System Testing
Security Testing
Acceptance Testing
Compatibility Testing
What kind of testing is done to make sure that new code changes do not have side effects on the existing functionalities?
Unit Testing
Security Testing
Regression Testing
System Testing
Which test is the first level of testing and is often performed by the developers themselves?
Unit Testing
Security Testing
Regression Testing
System Testing
Which test is the first level of testing and is often performed by the developers themselves?
Unit Testing
Security Testing
Regression Testing
System Testing
Which test is the first level of testing and is often performed by the developers themselves?
Unit Testing
Security Testing
Regression Testing
System Testing
What testing method makes debugging easier because it helps in finding issues early ?
Unit Testing
Compatibility
Testing
Security Testing
What testing method ensures that interactions between units are seamless?
Unit Testing
Compatibility
Testing
Security Testing
Integration Testing
What test checks for proper integration of others units to create components?
Integration Testing
Compatibility
Testing
Security Testing
System Testing
In what type of test is the functionality of a software tested from end-to-end?
Integration Testing
Compatibility
Testing
Security Testing
System Testing
System testing is typically conducted by a separate testing team than the development team before it is released?
True
False
What is the last phase of functional testing?
System Testing
Security Testing
Acceptance Testing
User Testing
What phase of testing will require you to get the software into the hands of the end users for beta testing?
System Testing
Security Testing
Acceptance Testing
User Testing
Under what category does performance testing fall under?
functional Testing
Security Testing
Non-functional Testing
User Testing
James has been asked to increase the amount of simulated demand on a software to see if it can handle it. What kind of test is this?
Stress Testing
Load Testing
Non-functional Testing
Software Testing
James has been asked to increase the amount of simulated demand on a software to see if it can handle it. What kind of test is this?
Stress Testing
Load Testing
Non-functional Testing
Software Testing
Alex decides to overload an application on purpose until it breaks. What type of test is Alex conducting?
Stress Testing
Load Testing
Non-functional Testing
Software Testing
The main focus of acceptance testing is
Ensuring that the system is acceptable to users
Ensuring that the system is acceptable to management
Accepting errors & bugs in the system
Ensuring that the system is acceptable to auditors
Which of the following test would be carried out when individual software modules are combined together as a group?
Unit testing
System testing
Integration testing
White box testing
Database normalization is
Data logging and accountability
Data redundancy optimization
Streamlining data process
Deleting temporary files
This is a testing types/technique:
Is vital for e-commerce website that store sensitive customer information like credit cards.
Security Testing
Database Testing
Usability Testing
This is a testing types/technique:
It ensures that your web application displays correctly across different devices.
Interface Testing
Database Testing
Compatibility Testing
Cookies are to
maintain the client data
maintain the session information
maintain the database
maintain the blogs
The IAS Model only focuses on protecting the availability of information, not its confidentiality or integrity.
True
False
Authentication and non-repudiation are additional components of the IAS Model beyond the CIA triad.
True
False
The IAS Model provides a structured framework designed to secure information systems against unauthorized access, tampering, or loss.
True
False
What formal, high-level document outlines an organization’s rules, expectations, and goals for protecting its information systems and data?
(a)
What foundational element in the IAS Model is mandatory and guides all security-related decisions, actions, and controls?
(a)
In the IAS Model, what defines the organization’s stance on information protection and is considered essential for enforcing security measures?
(a)
What does the Principle of Least Privilege (POLP) primarily ensure in information security?
Users are given full access to all system resources
Users are denied access to all confidential data
Users are granted only the minimum access necessary to perform their tasks
Users can share passwords to increase productivity
Which of the following best describes the Principle of Least Privilege (POLP)?
Giving users access to all system functions for convenience
Allowing administrators to monitor all user activities
Restricting users to only the resources and permissions they need to perform their job
Removing all user access to secure the system completely
What is the main goal of access restriction under POLP?
To give users faster access to all system areas
To prevent users from accessing unnecessary data or functions
To make system management more difficult
To allow users to explore all system resources freely
Which of the following best describes the principle of access control known as "Just-in-Time Access"?
Users are given permanent administrative privileges for efficiency.
All users have the same level of access to promote transparency.
Users receive temporary elevated privileges only when needed, which are revoked after use.
Users can request access to all systems at any time, without restrictions.
Best Practices for Implementing POLP
Role-Based Access Control (RBAC):
Assign permissions based on job roles.
Regular Access Reviews:
Periodically audit and adjust access levels.
User Segmentation:
Separate accounts for admin and user roles.
Limit Default Permissions:
Avoid giving unnecessary rights during account creation.
Monitor and Log Access:
Track privileged account activity for anomalies
Explain the Steps in Creation of Policies
What are the STEPS in POLICY MAINTENANCE
Regular Reviews
Version Control
Communication
Training
It Collects input from incidents and audits to improve and refine policies.
(a)
It refers to Modifying policies in response to new threats, technology changes, or organizational restructuring.
(a)
It refers to a Regularly scheduled audits and reviews (e.g., annually) to keep policies current.
(a)
It refers to Policy-driven access controls
(a)
Risk assessments to identify threats
Implementation of security best practices
Proactive vulnerability management
(a)
Predefined procedures for detecting, responding to, and recovering from security incidents.
(a)
The use of scientific techniques to collect, analyze, and preserve electronic evidence for investigation.
(a)
Access control systems (e.g., ID cards, biometrics), surveillance, and environmental controls.
(a)
