ISTQB Updated CTAL-TTA Exam Questions and Answers by issa

Cyclomatic complexity is a measure of the number of linearly-independent paths through a program's source code, which is often used as a measure of the complexity of a program. The control flow graph provided represents the logic of a software component and has more than 5 nodes with decision points, indicating that the complexity would exceed the maximum allowed value of 5. The calculation for cyclomatic complexity is V(G) = E - N + 2P, where E is the number of edges, N is the number of nodes, and P is the number of connected components. In this case, the calculated cyclomatic complexity exceeds the allowed threshold, thus a defect should be reported.

Analysis:

When planning and specifying security tests, it's essential to consider several critical aspects:

A. Identifying those from whom permission might be needed to run the tests:

True. It is crucial to get the necessary permissions, especially for penetration testing or other security tests that could be intrusive.

B. Re-assuring the (non-technical) Test Analysts that they will not need to be involved:

False. Security testing often requires a coordinated effort, and non-technical test analysts might still have roles, such as documentation, coordination, or assisting in test preparation. Excluding them entirely could lead to gaps in understanding and execution.

C. Ensuring that appropriate tools will be available for static analysis:

True. Having the right tools is vital for effective security testing, including static analysis tools for identifying vulnerabilities in the code.

D. Planning extra performance efficiency and reliability tests:

True. Performance efficiency and reliability are often linked to security (e.g., DoS attacks), so planning these tests is useful.

Explanation of Incorrect Option:

B: Excluding non-technical test analysts might undermine the testing process as they can still contribute in various supportive roles.

References:

The ISTQB CTAL-TTA syllabus covers security testing and the planning required, highlighting the need for comprehensive involvement of all relevant stakeholders.

Sources:

ISTQB-CTAL-TTA Syllabus

General knowledge on security testing practices.

Static analysis is used on an Agile project to identify the causes of technical debt through the use of tools. This approach allows teams to detect potential issues in code that could lead to technical debt if not addressed promptly, thus maintaining the health of the codebase as it evolves rapidly in Agile environments .

When a test class that validates a specific criterion (such as the minimum length of a password) fails, the immediate next step is to repair the failing code and re-execute the test. This approach adheres to the test-driven development (TDD) practices, where the cycle of writing a failing test, making it pass, and then refactoring is repeated. It ensures that each validation criterion is correctly implemented before moving on to additional functionalities or validations .