Computer Knowledge

Software Testing and Quality Control

2,598 Questions

Software testing and quality control questions cover testing methodologies, unit testing, and defect management. These concepts are crucial for the computer knowledge sections of competitive exams. Practice these questions to understand verification and validation processes thoroughly.

Quality control typesUnit testing purposeSoftware vulnerability testingTest planning tasksLoop testing criteriaTest harness functions

Software Testing and Quality Control Questions

Multiple choice

Which of the following statements is/are correct about double blind testing tool in penetration testing?

  1. In this testing, only one or two people are aware of the test to be conducted.

  2. It is useful for testing an organisation's security monitoring and incident identification as well as its response procedures.

  3. This testing is useful for estimating how much damage a disgruntled employee could cause.

  4. All of the above

  5. Both (1) and (2)
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are the correct statements about double blind testing technique in penetration testing.

Multiple choice

Which of the following is/are applicable for 'internal testing' in penetration test tools?

  1. This type of testing is performed by the organisation's IT team and the penetration testing team working together.

  2. This type of testing targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers, etc.

  3. This testing is useful for estimating how much damage a disgruntled employee could cause.

  4. This type of testing involves simulation of the tools and procedures of a real attacker.

  5. Both (2) and (3)
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Internal testing provides authenticity to the user. This is called 'internal testing'.

Multiple choice

Which of the following is/are applicable for 'targeted testing' in penetration test tools?

  1. This type of testing is performed by the organisation's IT team and the penetration testing team working together.

  2. This type of testing targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers.

  3. This testing is useful for estimating how much damage a disgruntled employee could cause.

  4. This type of testing involves simulation of the tools and procedures of a real attacker.

  5. All of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Target testing uses the specific trained IT team with the penetration testing team to finalise the system with given parameters.

Multiple choice

What are the automated testing tools applied in penetration test?

  1. These tools discover a combination of legal operations that will let the tester execute an illegal operation.

  2. The metasploit provides a ruby library for common tasks and maintains a database of known exploits.

  3. Fuzzing is a common technique to discover vulnerabilities and other exploiters.

  4. All of the above

  5. Only (2) and (3)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All are applicable for the automated tools in penetration test.

Multiple choice

Which of the following is/are applicable for manual penetration test?

  1. This testing layers human expertise on top of professional penetration testing software and tools.

  2. It provides complete coverage for standard vulnerability classes, as well as other design, business logic, and compound flaw risks.

  3. This test does not include automated static binary and automated dynamic analysis.

  4. All of the above

  5. Both (1) and (2)
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are the correct statements about manual penetration test.

Multiple choice

Which of the following is/are applicable for 'external testing' in penetration test tools?

  1. This type of testing is performed by the organisation's IT team and the penetration testing team working together.

  2. This type of testing targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers, etc.

  3. This testing is useful for estimating how much damage a disgruntled employee could cause.

  4. This type of testing involves simulation of the tools and procedures of a real attacker.

  5. Both (2) and (4)
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Target testing does not consider the server visibility to be detected. This is called 'external testing'.

Multiple choice

Which of the following statements is/are false about penetration testing?

  1. A penetration testing simply identifies and reports noted vulnerabilities.

  2. Penetration testing is used to determine whether unauthorised access or other malicious activity is possible.

  3. Penetration testing typically includes network penetration testing and application security testing.

  4. It tests the system outside the network trying to come in (external testing) and from inside the network.

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This statement is false as penetration testing identifies and detects the vulnerabilities by using automated tools.

Multiple choice

_________ is the process of finding errors in software code

  1. Debugging

  2. Compiling

  3. Testing

  4. Running

  5. None pf these

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Testing is the systematic process of finding errors in software code by executing test cases. Debugging is the process of fixing those errors after they are found. Compiling translates source code to machine language, and running simply executes the program without specifically searching for errors.

Multiple choice

In which of the following testing strategies is testing done without considering the internal structure of the application or programme?

  1. White box testing

  2. Grey box testing

  3. Blackbox or functional testing

  4. Unit testing
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Black box testing or functional testing strategy is where the internal structure or logic is not considered and its aim is to see whether the application or program is in according to the user requirement, or not.

Multiple choice

What is the correct order of various levels of testings?

  1. Unit testing, Integration testing, System testing and Acceptance testing

  2. Unit testing, System testing, Integration testing and Acceptance testing

  3. System testing, Unit testing, Integration testing and Acceptance testing

  4. System testing, Integration testing, Unit testing and Acceptance testing
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

The correct order of various levels of testing is Unit testing: This type of testing considers the internal logic and check whether single unit is working well or not. So, it is the first level. Integration testing: It checks the integrity of the modules and concentrates on functional requirements which is done after individual units are tested. So, it comes after unit testing. System testing: It is done to verify whether entire system is working according to requirement or not. So, it comes after checking the integrity of modules. Acceptance testing: It is done to know whether the system is read for acceptance by the user. So, it is a final level.

Multiple choice

What is not related to TEST CASE?

  1. Expected results

  2. Actual result

  3. Purpose

  4. Test environment
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

It is used in Test Plan to give details related to hardware and other softwares needed for doing the testing process.