System requirements analysis

Configuration management

Software qualification test

Project management

Process dimension

Time dimension

Resource dimension

Objective dimension

The release recommendation of the Certified Automotive Software Tester does NOT have any

influence on the release

The release provisions of the test object do NOT have any influence on the work of the Certified

Automotive Software Tester

The release recommendation of the Certified Automotive Software Tester does NOT have any

influence on the level of maturity of the corresponding software

The release recommendation does NOT have any influence on the scope of delivery

”L” not fulfilled

”L” partly fulfilled

”L” largely fulfilled

”L” fully fulfilled

Capability level 0

Capability level 1

Capability level 2

Capability level 3

The regression test strategy defines the test stage specific test environments and which tests

are to be executed in which test environments

The regression test strategy defines the selection of appropriate test cases for regression

testing, including a set of test cases selected as a basis set to be executed

The regression test strategy typically defines the cross-test stage procedure for the selection of

regression tests

The regression test strategy is an abstract description of the planned test levels and how to

proceed within those test stages. It is valid for one organization or one program, for one or

more projects

Traceability of the testers’ working hours to the executed test cases

Traceability of the specified test cases to the test results

Traceability of interface description to the specified maintainability tests

Traceability of the customer requirements to the specified integration tests

a) Dynamic Black-Box tests of the components with the objective of achieving 100% requirements

coverage for the safety relevant components

b) Tool-supported measuring of the condition coverage of the tested components, to ensure 100%

plausibility of the test results

c) Tool-supported static analysis to achieve MISRA compliance of the source code of the

components

d) Code reviews to check the understandability and correctness of comments in the source code

of the components

a) The tester ensures that all project team members contribute to the safety culture

b) The tester checks if all processes required for functional safety activities are implemented

c) The tester contributes to the development phases of the safety lifecycle

d) The tester carries out all activities that are related to functional safety

a) The ASIL of a hazard is the result of the hazard analysis and risk assessment

b) ASIL A represents the highest criticality, ASIL D the lowest one

c) An ASIL is assigned to all hazards classified

d) ASIL stands for ”Automotive Security Integrity Level”

a) Volume 4 (Product development at the system level), volume 6 (Product development at the

software level)

b) Volume 3 (Concept phase) and volume 6 (Product development at the soft-ware level)

c) Volume 2 (Management of functional safety) and volume 6 (Product development at the

software level)

d) Volume 5 (Product development at the hardware level) and volume 6 (Product development at

the software level)

a) For the development of automotive E/E systems, ISO 26262 describes requirements to ensure

functional safety

b) Functional safety and cybersecurity of automotive E/E systems contradict each other

c) Functional safety of an automotive E/E system can be assumed if unreasonable risks for

people can be avoided during the normal operation of this system

d) For the development of automotive E/E Systems, ISO 26262 describes the requirements to

ensure cybersecurity

a) The tester executes tests related to functional safety primarily during the product development

phase

b) The tester executes tests related to functional safety primarily during the concept phase

c) The tester executes tests related to functional safety to the same extent in all phases of the

safety lifecycle

d) The tester executes tests related to functional safety primarily during the post-release phase,

while in production

a) For safety requirements with a higher ASIL, more extensive testing must be done in comparison

to safety requirements with a lower ASIL, as the number of recommended test design techniques and test types is higher

b) For safety requirements with a higher ASIL, more extensive testing must be done in comparison to safety requirements with a lower ASIL, as the recommended test design techniques and test types lead to more test cases

c) For safety requirements with a higher ASIL, a more extensive testing in comparison to safety

requirements with a lower ASIL often occurs, as the number of recommended test design

techniques and test types doubles with each ASIL

d) For safety requirements with a higher ASIL, more extensive testing in comparison to safety

requirements with a lower ASIL often occurs, as the recommended test design techniques and

test types lead to more test cases

a) For ASIL A, branch coverage is used and statement coverage is not used, as 100% branch

coverage implies 100% statement coverage

b) For ASIL B, statement coverage is used and branch coverage is not used, as it is positioned at

a higher position in the table and is therefore more important

c) For ASIL D, MC/DC coverage is used as it is the only possible option

d) For ASIL B, statement coverage is used and branch coverage is not used, as 100% statement

coverage implies 100% branch coverage

a) AUTOSAR defines a closed architecture, which can only be used by the companies, who are

members of the AUTOSAR consortium

b) AUTOSAR is not compliant to international standards

c) AUTOSAR supports only AUTOSAR-control units

d) AUTOSAR standardizes the basic functionality of the software of automotive control devices

a) The integration test of the AUTOSAR software in a virtual test environment cannot be implemented, as real hardware is necessary

b) The RTE is a suitable test interface for the system test of the software

c) The AUTOSAR acceptance test must be performed to prove the AUTOSAR conformity of the

software

d) AUTOSAR-specific tests are limited to the software of a single control device

a) Automotive SPICE® has the objective of rating the capability of the development processes of the sub-contractors by using assessments

b) ISO 26262 has the objective of rating the capability of the development processes of the

supplier by using assessments

c) ISO 26262 has the objective of avoiding risks from systematic errors during development by

specifying suitable requirements and processes

d) ISO 26262 has the objective of defining requirements for the processes and methods to be used by the tester in the development of E/E-Systems

a) Control computer, simulation software, data logger

b) Real-time capable computer, network accesses, report database

c) Measuring devices, specification documents, laboratory

d) Data management tool, operating system, environment model

a) Environment model, bus system and diagnosis interface

b) Analogue and digital inputs, watchdog and internal data memory

c) Analogue and digital inputs, supply voltage and diagnosis interface

d) Analogue and digital inputs, bus system and diagnosis interface

a) In a closed-loop-system, the output signals of the test object are directly linked to the inputs of

the test object

b) In a closed-loop-system, the output signals of the test object are linked to the inputs of the test

object via an environment model

c) In an open-loop-system, the output signals of the test object are directly linked to the inputs of

the test object

d) In an open-loop-system, the output signals of the test object are linked to the inputs of the test

object via an environment model

a) In the Model-in-the-Loop (MiL) test environment, the test object is readable for humans

b) In the Model-in-the-Loop (MiL) test environment, the test object exists as a model

c) In the Model-in-the-Loop (MiL) test environment, additional hardware is necessary

d) A Model-in-the-Loop (MiL) test environment is used early in the development process

a) In the Software-in-the-Loop (SiL) test environment, additional hardware is necessary

b) In the Software-in-the-Loop (SiL) test environment, the test object exists as compiled object code

c) In the Software-in-the-Loop (SiL) test environment, a wrapper is necessary to stimulate and

observe inputs and outputs

d) In the Software-in-the-Loop (SiL) test environment, the number of access points is limited by the wrapper

a) Tests of the response time for diagnosis requests

b) Tests for electromagnetic compatibility

c) Performance tests of the target hardware

d) Interface and integration tests

a) Automotive SPICE® defines the test techniques to be used for each test level

b) ISTQB defines the test techniques to be used depending on the test levels

c) ISO 26262 and Automotive SPICE® define method tables for all mentioned test levels

d) Depending on the ASIL, the method tables of the ISO 26262 recommend test techniques that

shall be used

a) Test case generator, rest bus simulation, power supply

b) Breakout box, software compiler, real parts

c) Power supply, real-time capable computer, electric error simulation

d) Electric error simulation, signal processing, processor simulation

a) For integration tests is only the Hardware-in-the-Loop (HiL) test environment suitable

b) For component tests a Model-in-the-Loop (MiL) test environment and Soft-ware-in-the-Loop

(SiL) test environment are both suitable

c) For system tests, a Model-in-the-Loop (MiL) and Hardware-in-the-Loop (HiL) test environments

are both suitable.

d) Any XiL test environment can be used on every test level

a) The test execution duration of the simulation depends on the complexity of the model and the

computing power of the test system

b) Access to bus and diagnosis interfaces are implemented in the environment

c) The environment model provides extensive implementations of physical processes (like for example electromagnetic compatibility or cable breaks)

d) The simulation of the Model-in-the-Loop (MiL) test environment can only be started and

stopped. Pausing the simulation is not possible

a) Test of the overall system requirements for the vehicle

b) Test of the driving behavior of the chassis

c) Test of the electronic control unit functions for correct behavior

d) Test of the data exchange between the electronic control units

a) The cost of a detected error in the test object is highest if the error is found in the Model-in-theLoop (MiL) test environment

b) A Hardware-in-the-Loop (HiL) test environment is a more realistic test environment than a Software-in-the-Loop (SiL) test environment

c) The amount of effort for design, commissioning and maintenance of a Hardware-in-the-Loop

(HiL) test environment is lower than a Software-in-the-Loop (SiL) test environment

d) Hardware components are tested in a Software-in-the-Loop (SiL) test environment

a) A Hardware-in-the-Loop (HiL) test environment, as errors for the test of the error handling can

only be simulated in this test environment

b) A Software-in-the-Loop (SiL) test environment, as development boards are available and error

detection is to be tested

c) A Model-in-the-Loop (MiL) test environment, as no hardware is available yet and the test object is available as a model

d) If no electronic control unit hardware is available, the software cannot be tested

a) A coding standard defines the necessary test practices (e.g. test techniques, test logging)

b) A coding standard defines the necessary test specification languages (e.g. test automation, test

case selection)

c) A coding standard defines the necessary development practices (e.g. commenting, naming

conventions)

d) A coding standard defines the necessary modelling techniques (e.g. states, state transitions)

a) Requirement 1 is not verifiable

b) Requirement 2 is not singular

c) Requirement 3 is inconsistent

d) Requirement 4 is not unambiguous

a) Requirement based tests are only focused on the coverage of requirements and do not allow the use of intuitive or explorative tests

b) Requirement based tests have the objective to test the requirements until they are consistent

and complete

c) Requirement based tests have the objective to cover requirements with test cases

d) Requirement based tests verify the test object independently from the quality of the customer requirements for the fulfilment of customer requests

a) Fault injection tests insert faults in the behavior of external components to detect that the

system can deal with erroneous situations

b) Fault injection tests insert faults in internal interfaces, e.g. as lost messages

c) Fault injection tests insert faults in the system specification, e.g. as too low parameters for the

required performance

d) Fault injection tests insert faults in the operating unit that show as internal defects

a) White-box-test design techniques should be preferred over black-box-test design techniques,

as the tester can take advantage of knowledge of the code

b) The recommendation of the ISO 26262 for the identified ASIL is the decisive factor for the

selection of the test design techniques

c) The combination of the suitability of the test basis and the test level together with a high risk of non-detected errors is the decisive factor for the test design techniques to be selected

d) Intuitive test design techniques should always be preferred over structure based test design

techniques

a) B1 = TRUE, B2 = FALSE, B3 = TRUE

b) B1 = TRUE, B2 = TRUE, B3 = TRUE

c) B1 = FALSE, B2 = FALSE, B3 = FALSE

d) B1 = TRUE, B2 = FALSE, B3 = FALSE

a. Running unit tests, integration tests, system tests, and acceptance tests in a continuous loop

b. Testing the same component multiple times, injecting a different fault each time, and comparing how each fault is handled

c. Running the components of a system concurrently to find any electrical or functional interference

d. Running the same test on multiple versions of the same software and comparing the results

a. A Closed Loop system uses no environmental sensor inputs, relying on the driver’s

selection (such as with turn signals) for control decisions

b. An Open Loop system, such as the switch controlling the headlights, does not use

the resulting output as an input in making later decisions

c. An example of an Open Loop system is the module maintaining the speed when

cruise control is on, because it is “open” to using the current speed as an input

d. A Closed-Loop system, such as the switch controlling the headlights, has the output

“closed off,” preventing it from affecting later decisions

a) Rules of the category required must not be neglected by the developer, even if he gives a reason

b) The binding character of guidelines is predefined for every organization

c) Rules of the category mandatory should avoid typical coding anomalies

d) MISRA guidelines are fully testable by static analysis tools

a. ISO 262 and Automotive SPICE? Define method tables for all mentioned test levels

b. Depending on the ASIL, the method tables of the ISO 2626 recommend test techniques that shall be used

c. Automotive SPICE defines the test techniques to be used for each test level

d. ISTQB defines the test techniques to be used depending on the test levels

a. ASPICE requires bidirectional traceability, both vertically and horizontally

b. ASPICE concentrates on vertical traceability from code to specifications

c. ASPICE concentrates on horizontal traceability from requirements to code

d. ASPICE requires bidirectional traceability from the original requirements but does not address change requests

a. Retirement

b. Production

c. Support

d. Utilization

a. 1, 9, 2

b. 1, 2, 3, 9

c. 1, 2, 9, 5, 4, 7

d. 1, 9, 2, 3, 5, 6, 8

a. IEC 61508 specifies that the integration tester is responsible for performing a risk

analysis

b. When a risk to life or limb has been identified, it must be eliminated

c. Safety in the working environment and cybersecurity are key elements of Functional Safety

d. Risks to life or limb must be mitigated until there is nounreasonable risk

a. These volumes contain the fundamental vocabulary and terminology that a tester should be familiar with, as well as the guidelines for how to apply ISO 26262 to their work

b. These volumes describe how safety-oriented analysis can be conducted by a tester

c. These volumes address the test-specific aspects and verification measures of system, software and hardware development

d. These volumes explain how to manage functional safety through testing

a. Incomplete process, Managed process, Performed process, Established process

b. Incomplete process, Established process, Managed process, Performed process

c. Incomplete process, Established process, Performed process, Managed process

d. Incomplete process, Performed process, Managed process, Established process

a. Measurable

b. Consistent

c. Achievable

d. Balanced

a. SiL

b. HiL

c. MiL

d. Component-HiL

a. HiL provides easy access to the test item

b. MiL is furthest from reality

c. SiL requires the most detailed test basis

d. MiL is the most difficult to implement and maintain

a. Each component of the system, any combination of components, or the system as a whole can be tested in a MiL test environment

b. Early MiL testing of bus and physical behaviors (such as cable breaks and shorts) commonly removes the need for specialized hardware

c. MiL tests cannot be paused because there is no clock to set a common time for data capture across elements

d. The abstraction of modeling reduces complexity, keeping the environmental model simple as the scope of the functions increases

a. For ASIL A, there are no recommendations for or against the use of any particular test technique

b. The ASIL for each module determines the required mitigating measure or test technique

c. The highest ASIL often mandates the use of MC/DC for completeness

d. At the lowest ASIL, justification is not required when using alternative measures

a. ASPICE

b. Coding standard

c. ECU configuration standard

d. ISO 26262

a. By standardizing basic software functionality of automotive ECUs, AUTOSAR aims to reduce the competition in implementation

b. AUTOSAR does not address sustainable use of natural resources as this would hinder competition in implementation

c. By supporting transferability and scalability, AUTOSAR encourages collaboration in the standards and competition in implementation

d. AUTOSAR prevents collaboration between partners by allowing and supporting the use of multiple different functional domains

a. SiL

b. MiL

c. HiL

d. Components-HiL

a. In the Model-in-the-Loop (MiL) test environment, the test object is readable  for humans

b. In the Model-in-the-Loop (MiL) test environment, additional hardware is necessary

c. In the Model-in-the-Loop (MiL) test environment is used early in the development process

d. In the Model-in-the-Loop (MiL) test environment, the test object exists as a model

a. One applies to software development while the other applies to hardware development

b. One depends on the criticality levels of ASIL while the other does not

c. One affects the work of a tester while the other does not

d. One applies to the process of product/system development while the other applies to the completed product/system

a. Requirements at each test level and the need to minimize automation for enhanced test coverage

b. Reducing the ability to base testing on risk assessment vs. increasing the ability to repeat all automated test cases

c. Benefits of early testing and the increased costs of test environments at higher test levels

d. Need to repeat all lower level test cases at each level, leading to explosive growth in the number of tests over time

a. Absence of unreasonable risk due to hazards caused by malfunctioning behavior of Electric/Electronic systems

b. Minimizing unreasonable risk due to hazards caused by malfunctioning behavior of Electric/Electronic systems

c. Absence of reasonable risk due to hazards caused by normal behavior of Electric/Electronic systems

d. Minimizing unreasonable risk due to hazards caused by the normal behavior of Electric/Electronic systems

a. Car producers want increased quality being developed faster and with less cost

b. Car producers are only concerned about the cost of development

c. Car producers want to create more models faster and cheaper and will accept lower quality

d. Car producers focus on quality and are not concerned if the development takes longer to achieve it

a. Fault injection tests insert fault in the system specification, eg. as  too low parameters for the required performance

b. Fault injection test insert faults in the behavior of external components to detect the system can deal with erroneous situations

c. Fault injection tests insert faults in the operating until that show as internal defects

d. Fault injection tests insert fault in internal interfaces, e.g. as lost messages

a. More time is required during requirements analysis which reduces the amount of time the tester has available to actually execute the tests

b. It is difficult to conclude which test results satisfy which requirements during analysis of test results, if the requirements are too specific

c. The tester may become frustrated at the detail required and design low-quality test cases

d. The tester may not be able to test all the requirements and prioritization of the test cases will be needed

a. A prediction of how the final product will impact environmental sustainability, based on emissions data from testing

b. The simulation of the functional system design on a real-time capable computer

c. A part of a test environment that is able to simulate defects at the interfaces of a component or system

d. The abstraction of the real environment of a component or system (including other components, vehicle processes, and environment conditions) in a real-time simulation

a. Search for possible risks from the very start of the project

b. Follow a linear progression from product concept to product production

c. Perform the majority of the system test effort during the product production phase

d. Perform initial safety test planning in parallel with the developers during the product development phase

a. Tests of the reaction to configuration data should be done in either the SiL or the HiL environment, but cannot be done in the MiL environment

b. Test of the interactions at interfaces are optional in the SiL environment

c. Tests for usability can be done in the SiL environment and should be done in the HiL environment

d. The SiL environment should only be used to test the reaction to configuration data

a. Components cannot be tested individually

b. HiL focuses on finding functional defects in the hardware, not the software

c. Real-time response is not measurable because all hardware components are simulated

d. All tests are run in real-time and cannot be paused

a. For the development of automotive E/E System, ISO 26262 describes the requirements to ensure cybersecurity

b. Functional safety of an automotive E/E system can be assumed if unreasonable risks for people can be avoided during the normal operation of this system

c. Functional safety and cybersecurity of automotive E/E systems contradict each other

d. For the development of automotive E/E system, ISO 2626 describes requirements to ensure functional safety

a. Closed-loop system

b. Open-loop system

c. Back-to-back system

d. Bus system

a. The tester is responsible for reporting back on all areas of the software development lifecycle in their summary report so they should have a good grasp on activities outside of their field of testing

b. It is the tester’s role to ensure there is compliance with the functional-safety relevant requirements across the whole project, not just in their testing activities

c. The tester must understand that their actions are not independent of other processes and can impact the safety of the final product

d. The tester may be asked, on occasion, to audit the work of others in the development team and so must be familiar with all aspects of product development

a. Apply BVA, FI, MC/DC; consider applying Formal Design Review and On Vehicle Testing

b. Apply BVA, FI, MC; consider applying Formal Design Review and On Vehicle Testing

c. Apply Formal Design Review, BVA, FI, MC/DC, MC; consider applying On Vehicle Testing

d. Apply Formal Design Review, BVA, MC/DC, MC, On Vehicle Testing; consider applying FI

a. Standards improve efficiency by increasing the amount of time required to achieve the stated level of quality

b. Standards influence the Project Management Triangle – time, cost, and quality

c. Standards maximize the project and product risks that can be taken by the developer to create a better product

d. Standards have minor influences on projects and often do not need to be adhered to

a. This risk carries low safety requirements. Safety goals and safety requirements should be drafted out accordingly.

b. This risk carries low safety requirements. It can be addressed by complying with the existing quality management.

c. This risk carries high safety requirements. Safety goals and safety requirements must be drafted out accordingly.

d. This risk carries high safety requirements. The project should be discontinued immediately

a. There is a 1-to-1 mapping of ISTQB and ASPICE 3.0 test levels, but some ISO 26262 levels cover two ISTQB/ASPICE levels

b. The CTFL syllabus provides ASIL test technique recommendations for each test level

c. Method tables in ISO 26262 provide test technique recommendations based on ASIL levels

d. ASPICE assigns suggested test techniques to each specified test level, based on method tables in the CTFL

The verification strategy is to have all unit test results verified by an external commercial testing organization. All regression testing is performed in-house when necessitated by defects discovered during system testing. The criteria is to achieve 100% match between the unit tests and the regression tests.

The verification strategy is to use a code analyzer to perform static analysis on all code followed by functional testing against requirements. The criteria for unit verification are no issues labeled as critical or high by the code analyzer and 100% path coverage per unit.

The strategy is to focus on verification of functionality at the earliest possible stage, preferably during unit testing. The criteria for unit verification are 100% satisfaction of the unit’s functional requirement, with no outstanding defect reports, and a 100% match of those results in regression testing.

The strategy is to not delay developers by testing during unit coding, but to conduct functional testing as part of the initial system integration. The criteria will be 100% decision coverage.

a. 0% up to 15% - F

16% up to 50% - L

51% up to 85% - N

86% up to, and including 100% - P

b. 0% up to 15% - N

16% up to 50% - P

51% up to 85% - L

86% up to, and including 100% - F

c. 0% up to 15% - N

16% up to 50% - L

51% up to 85% - P

86% up to, and including 100% - F

d. 0% up to 15% - F

16% up to 50% - L

51% up to 85% - P

86% up to, and including 100% - N

Test model report

Integration analysis summary

Incident/deviation report

Software quality characteristic report

A test of software integration in a virtual environment

A test of software integration in the real electronic control unit

A test of the functional integration and connectivity of different electronic control units

A test of the software system for compliance at the communication and application levels

Cases 3, 5, 6, and 7

Cases 1, 2, 3, and 4

Cases 2, 4, 6, and 8

Cases 1, 3, 5, and 7

When the hardware design is completed

When each individual software component is developed

When the completely developed product or a completed prototype is available

When there are discrepancies with the expected behavior and real behavior of the system

Computer, simulation software, data logger, measuring tools and laboratory protection

Physical road surface, computer, driver, measuring tools, oscilloscope and external protection

Computer, combustion engine, driver, oscilloscope, and laboratory protection

Simulation software, camera, combustion engine, and laboratory protection

“Required” guidelines may be neglected by the developer without written explanation

Organizations can tailor the guidelines (higher or lower) as indicated by their market

Directives that cannot be verified using static analysis tools should be rejected

Application of the specified coding standards can help prevent anomalies in the code

Software in the Loop

Vehicle in the Loop

Hardware in the Loop

Model in the Loop

Concept, Development, Acceptance, Utilization, Support, Retirement

Concept, Development, Production, Release, Support, Retirement

Concept, Implementation, Production, Utilization, Support, Retirement

Concept, Development, Production, Utilization, Support, Retirement