Computer Knowledge

Software Testing and Quality Control

2,292 Questions

Software testing and quality control questions cover testing methodologies, unit testing, and defect management. These concepts are crucial for the computer knowledge sections of competitive exams. Practice these questions to understand verification and validation processes thoroughly.

Quality control typesUnit testing purposeSoftware vulnerability testingTest planning tasksLoop testing criteriaTest harness functions

Software Testing and Quality Control Questions

Multiple choice technology testing

A test harness is a ?

  1. A test environment comprised of stubs and drives needed to conduct a test

  2. A high level document describing the principles, approach and major objectives of the organization

  3. A set of several test cases for a component or system under test

  4. A distance set of test activities collected into a manageable phase of a project
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A test harness is precisely a test environment that includes stubs (simulated components called by the system under test) and drivers (components that call the system under test) needed to conduct automated testing. Options B and C describe test strategy and test suite documents, not a harness. Option D appears to have a typo ('distance' instead of 'distinct') and describes test phases, not the harness itself.

Multiple choice technology testing

Testing of software used to convert data from existing systems for use in replacement systems ?

  1. Data driven testing

  2. Configuration testing

  3. Migration testing

  4. Back to back testing
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

To solve this question, the user needs to have knowledge of software testing concepts, specifically testing related to data conversion from existing systems to new systems.

Option A: Data driven testing is a type of testing where test input or output values are read from data files instead of using hardcoded values. This type of testing is not directly related to testing software used to convert data from existing systems to replacement systems.

Option B: Configuration testing is a type of testing that checks whether the software is properly configured according to the requirements. This type of testing is not directly related to testing software used for data conversion.

Option C: Migration testing is a type of testing that verifies the data and software functionality after migrating from the old system to the new system. This type of testing is directly related to testing software used to convert data from existing systems for use in replacement systems. Thus, option C is the correct answer.

Option D: Back to back testing is a type of testing where two identical systems are set up, and transactions are processed on both systems simultaneously to compare the results. This type of testing is not directly related to testing software used for data conversion.

Therefore, the answer is: C. Migration testing.

Multiple choice technology security

Roy is using a tool which creates intentionally malformed data and then having the software under test consume the malformed data to see how it responds.What kind of tool must Roybe using ?

  1. Warping Tool

  2. Fuzzing Tool

  3. Randomizer

  4. Code Injector
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Fuzzing (or fuzz testing) involves creating malformed, unexpected, or random data inputs and feeding them to software to identify vulnerabilities, crashes, or unexpected behavior. This is exactly what Roy is doing. Option B is correct. Options A (Warping Tool), C (Randomizer), D (Code Injector) are not standard security testing tools for this purpose.

Multiple choice technology security

Analysis of the context of a business decision best describes which of the following?

  1. Logic Testing

  2. Stress Testing

  3. Conformance Testing

  4. Unit Testing
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Logic testing examines whether the business rules and decision-making logic in an application produce correct outputs for given inputs. It analyzes the context and conditions of business decisions to ensure the software implements the right rules and handles edge cases properly. This goes beyond functional testing to validate the reasoning behind automated decisions.

Multiple choice technology security

If we have to check whether a software product meets the requirements of a particular specification then which one of the following should be performed?

  1. Logic Testing

  2. Stress Testing

  3. Conformance Testing

  4. Unit Testing
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Conformance testing evaluates whether a software product meets standard specifications or compliance requirements. Stress testing evaluates system limits under heavy loads, unit testing checks individual source code units, and logic testing assesses internal program decisions and code pathways.

Multiple choice technology security

If we increase the load on a software system beyond normal operating capacity then that can be called which of the following?

  1. Logic Testing

  2. Stress Testing

  3. Conformance Testing

  4. Unit Testing
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Stress testing evaluates software behavior under workload conditions that exceed normal operating capacity. Unit testing validates individual source code components, conformance testing verifies standard compliance, and logic testing focuses on verifying the correctness of logical flows within the code.

Multiple choice technology security

If a developer writes a code to test an individual method in the source code then this process best describes which of the following?

  1. Logic Testing

  2. Stress Testing

  3. Conformance Testing

  4. Unit Testing
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Unit testing involves testing individual components, methods, or functions in isolation to ensure they work correctly. When a developer writes code to test a single method, they are practicing unit testing - verifying that each small piece of the application performs its intended function. This is distinct from integration or system testing which examine how components work together.

Multiple choice technology security

Which kind of testing has Throughput, processing delay, and load as metrics?

  1. Functional Testing

  2. Performance Testing

  3. Environment Testing

  4. Fault Injection
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Performance testing measures system behavior under work, focusing on metrics like throughput, processing delay, and load. Functional testing evaluates correctness of features, environment testing checks deployment platform parameters, and fault injection introduces errors to test system resilience.

Multiple choice technology security

Which of the following involves validating the positive and negative requirements of the software?

  1. Functional Testing

  2. Performance Testing

  3. Environment Testing

  4. Fault Injection
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Functional Testing validates both what the software SHOULD do (positive requirements: valid inputs produce expected outputs) and what it should NOT do (negative requirements: invalid inputs are rejected, edge cases handled). Performance Testing (B) checks speed and scalability, not functional behavior. Environment Testing (C) verifies compatibility across platforms. Fault Injection (D) tests resilience, not functional correctness.

Multiple choice technology security

Which of the following techniques involves examining the source code for the absence of security characteristics?

  1. Source code analysis

  2. Property-based Testing

  3. Black Box debugging

  4. Dynamic Code Analysis
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Property-based Testing verifies that specific security properties (assertions about what must be true, like 'no hardcoded passwords') are satisfied by examining source code. Source code analysis (A) is too broad and includes examining code presence, not just absence. Black Box debugging (C) and Dynamic Code Analysis (D) don't primarily examine source code for security characteristics.

Multiple choice technology security

Which of the following techniques is used to trace system calls as the software is executing?

  1. Source code analysis

  2. Performance Testing

  3. Black Box debugging

  4. Dynamic Code Analysis
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Dynamic Code Analysis involves analyzing software WHILE it executes, which includes tracing system calls to observe runtime behavior. Source code analysis (A) is static analysis without execution. Performance Testing (B) measures speed and resource usage, not system call tracing. Black Box debugging (C) examines external behavior without internal visibility.

Multiple choice technology security

One of the main characteristics of black box testing of information systems is:

  1. The testing team is provided full knowledge of the resources to be tested.

  2. The testing team is provided partial knowledge of the resources to be tested and has to acquire some information on its own.

  3. The testing team is provided no knowledge of the resources to be tested and has to acquire information on its own.

  4. The testing team is not permitted direct access to the resources to be tested.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Black box testing assumes the testing team has zero prior knowledge of the target system's internal structures or configurations, requiring them to gather information externally. White box testing involves full knowledge, while grey box testing involves partial knowledge of the system's internals.

Multiple choice technology security

A team member wrote a piece of code. IQA is being done by other team member in the same project. What type of testing does he do

  1. compliance testing

  2. functional testing

  3. unit testing

  4. black box testing
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

IQA (Independent Quality Assurance) or peer review of code by another team member is a form of unit testing verification - checking individual code units for correctness before integration. Functional testing validates features work as specified, compliance testing checks standards adherence, and black box tests external behavior without seeing code.

Multiple choice technology security

When do we need to be performance testing

  1. After system testing and application security testing but before deployment to production

  2. After application security testing but before acceptance test by the client/end user

  3. just before deployment to production

  4. after system test
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Performance testing should occur after security testing but before user acceptance testing. This order ensures security vulnerabilities are identified first, then performance is validated under realistic load conditions, and finally business functionality is verified with end users before production deployment.