Computer Knowledge

Software Testing and Quality Control

2,292 Questions

Software testing and quality control questions cover testing methodologies, unit testing, and defect management. These concepts are crucial for the computer knowledge sections of competitive exams. Practice these questions to understand verification and validation processes thoroughly.

Quality control typesUnit testing purposeSoftware vulnerability testingTest planning tasksLoop testing criteriaTest harness functions

Software Testing and Quality Control Questions

Multiple choice
  1. It is an integrated platform for performing security testing of web applications.

  2. Burp Suite is designed to be used by hands-on testers to support the testing process.

  3. It provides the maintainability of the web applications.

  4. All of the above are correct.

  5. Both (1) and (2).

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

These are correct about Burp Suite.

Multiple choice
  1. Inspection of code

  2. Random checking

  3. Debugging, using logging

  4. Debugging, using IDE

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Systematic debugging approaches include code inspection/reading, using logging to trace execution, and using IDE debugging tools with breakpoints and watches. 'Random checking' is not a structured debugging methodology - it lacks systematic approach and is unlikely to efficiently locate or resolve bugs.

Multiple choice
  1. A penetration test is used to check the system protection from vulnerabilities.

  2. This test is performed to identify the target system and the goal.

  3. A penetration test can be white box or black box.

  4. All of the above

  5. Both (1) and (2)

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All are the correct statements about penetration test.

Multiple choice
  1. It determines the feasibility of a particular set of attack vectors.

  2. It identifies the vulnerabilities that may be difficult or impossible to detect with automated network or application vulnerability scanning software.

  3. This test is used to check the ability of network defenders to successfully detect and respond to the attacks.

  4. It provides evidence to support increased investments in security personnel and technology.

  5. All of the above

Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All are the correct statements.

Multiple choice
  1. It simulates the actions and procedures of a real attacker and informs the person who is going to test it.

  2. This testing requires a considerable amount of time for reconnaissance.

  3. These tests can be useful for testing an organisation's security monitoring.

  4. All of the above

  5. Both (1) and (2)

Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are correct statements about blind testing.

Multiple choice
  1. In this testing, only one or two people are aware of the test to be conducted.

  2. It is useful for testing an organisation's security monitoring and incident identification as well as its response procedures.

  3. This testing is useful for estimating how much damage a disgruntled employee could cause.

  4. All of the above

  5. Both (1) and (2)

Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are the correct statements about double blind testing technique in penetration testing.

Multiple choice
  1. This type of testing is performed by the organisation's IT team and the penetration testing team working together.

  2. This type of testing targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers, etc.

  3. This testing is useful for estimating how much damage a disgruntled employee could cause.

  4. This type of testing involves simulation of the tools and procedures of a real attacker.

  5. Both (2) and (3)

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Internal testing provides authenticity to the user. This is called 'internal testing'.

Multiple choice
  1. This type of testing is performed by the organisation's IT team and the penetration testing team working together.

  2. This type of testing targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers.

  3. This testing is useful for estimating how much damage a disgruntled employee could cause.

  4. This type of testing involves simulation of the tools and procedures of a real attacker.

  5. All of the above

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Target testing uses the specific trained IT team with the penetration testing team to finalise the system with given parameters.

Multiple choice
  1. These tools discover a combination of legal operations that will let the tester execute an illegal operation.

  2. The metasploit provides a ruby library for common tasks and maintains a database of known exploits.

  3. Fuzzing is a common technique to discover vulnerabilities and other exploiters.

  4. All of the above

  5. Only (2) and (3)

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All are applicable for the automated tools in penetration test.