When there is modification to the structure of a system, which testing type should be used?
"Establish Functional Improvement Objectives" is a step in the ____________ of benchmarking.
-- Exhibit –

-- Exhibit --
In the Cost of Quality diagram shown, the COQ cost labeled "A" represents:
Processes add value to both management and the workers. Give three reasons why processes are needed from a management perspective, and three reasons why processes are needed from a worker's perspective.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
A "master list" of processes that support an organization in accomplishing its goals is known as a:
Which one of the following is NOT a step for benchmarking to establish a baseline goal?
In the context of the PDCA cycle, Work Processes represent the _____ component and the Check Processes represent the ___________component.
Which of the following is the primary objective of a quality improvement program?
The check sheet is used to record data gathered over a period of time to determine frequency of an event.
In a software system a control implemented to protect the security of the system is:
Checking if a date field on a screen gives an error on entering February 29 is an example of:
In a Waterfall Development Model, most risk management activity occurs close to milestones.
____________ Listening is when the listener is performing an analysis of what the speaker said.
Objective of assuring that the software / COTS can be integrated into the business system work flow is to ensure that:
As the type of product changes on the process maturity continuum, the work processes also change.
-- Exhibit –

-- Exhibit --
In the diagram, the sections of the diagram labeled "A" and "B" represent larger portions of "DO" and "CHECK". Note that the top of the diagram represents a more creative process and lower portion a more defined process.
Which of the following management philosophies would be associated with a quality management philosophy as opposed to the traditional management philosophy?
Which organization developed the generally accepted model for internal control?
For contracted software, detailing the obligations of both contractual parties within the contract addresses:
Which of the following is not a process within Level 4 for maturing Quality Assurance Processes?
The purpose of a security awareness program is to achieve all of the following objectives, EXCEPT:
Which of the following quality control activities is most effective in uncovering defects?
If you were to download a software package, which had been developed and placed on the internet for general usage, the one thing you could not control is:
The theory of levels of maturity is that organizations can skip a level if business needs require them to be at a higher maturity level.
Process ___________ allows priorities to be set for defining or improving processes.
Many managers use a metrics dashboard to present measurement data to the user of that data. Another name for a dashboard is:
Many organizations have chosen to outsource all or part of their IT services. Assume you are an IT quality assurance manager and you have been asked by senior management in your organization about outsourcing. They want to know the answer to these two questions:
1. What are the major advantages to outsourcing software development?
2. What are the major disadvantages to outsourcing software development?
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
After establishing the team for conducting security baseline, the first step should be to:
Which of the following is / are level(s) for maturing the Deliverables Processes?
The concept of "just in time", as pioneered by Toyota, is only applicable to inventory control.
Which of the following is NOT normally considered one of the questions that must be answered in performing quality planning?
Which party(s) is responsible to ensure protection of intellectual property rights included within a contract for software development?
The factors that need to be addressed during contract negotiations for software developed by an outside organization include the following, except for:
While contracting for outsourced software development, ___________ refers to the rights of the customer to run the application system in more than one location.
Which of the criteria should be followed to select a process model such as CMMI or ISO?
A contract that will assure the contracting organization of effective ongoing operation maintenance of the contracted software should include which of the following contractual provisions?
Process mapping identifies or maps relationships with all the below mentioned activities except?
Many contracts contain provisions to determine how the contract will be changed in the event that some undetermined circumstance occurs. This provision in a contract is called:
As a Test Manager for the project team, you are required to develop the test schedule. List down the phases and high level activities that would become part of the schedule.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
An "offshore" development company has been selected to develop a new inventory control system for your business. Your manager has asked you to develop a plan that will alleviate his concerns about "knowledge transfer" from the development contractor to your company's staff. Briefly describe the plan you will present to your manager.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
You have performed an analysis of production level defects and concluded that many of these defects were introduced inadvertently when changes to other parts of the software were being made. What type of validation technique is used to identify defects caused by modifications to other parts of the code and when is this type of testing appropriate?
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
To produce quality products and services, it very important to have mature deliverables processes, which translates the customer requirements correctly throughout the life cycle phases. Briefly describe each level of the five-level model for Deliverables Processes maturity.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Explain the difference between 'goals' and 'objectives'. Give two example goals with a corresponding objective.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
The relationship with the software development contractor and the customer is an ongoing relationship that must be kept viable and healthy. The contractor wants to sell more software development services to the customer and the customer wants software that works and can be enhanced and maintained.
List and describe four major concerns that arise in maintaining a relationship of harmony and good will between the customer and contractor.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
From a control perspective, detective controls are only effective when what other types of controls are implemented?
Which has frequently been referred to as the most difficult task in getting people to use the process?
Which of the following is / are used for determining the magnitude of the Risk?
Determining which risks are likely to affect the project and documenting the characteristics of each is called ________ .
Which of the following is the most difficult component of the decision making process?
Within COTS software, attributes designed to "get you out of trouble" when you get into trouble is which aspect of a COTS software?
The COSO Enterprise Risk Management model’s ____________ component ensures that management has a process in place to set objectives and that the chosen objectives support and align with the organization’s mission/vision.
It is generally recognized that software testing should begin at which software development phase?
When using a cause-and-effect diagram to build controls, the effect that is desired is the achievement of the control objective. The causes defined in the cause-and-effect diagram are listed for what purpose:
If you found, through testing software, that your IT project team was building software with an average of 58 defects per 1000 function points, this would be a:
Who is responsible to ensure that the organization has sufficiently trained personnel to protect its IT resources?
__________ are used to determine whether the standards have been adhered to or not.
Which of the following tools / techniques is a facilitated technique where all teammates participate by individually ranking ideas, issues, concerns, and solutions; then the group achieves a consensus by combining the individual rankings?
In terms of benefit compared to the control's cost, identify the correct sequence of controls in ascending order of cost.
Which answer below is NOT one of the seven steps for implementing an IT quality function?
A common term that is used today for contracting for software development is "performance based contracting." Performance based contracting means:
If the input product to a workbench does not meet the entry criteria, it should be accepted to save time and reworked later in the process.
A standard must be measurable, attainable, and necessary. What is meant by 'attainable' in this context?
COTS software is normally developed prior to an organization selecting that software for its use.
The team member is told what to do, and then how to check that what was done was done correctly. This statement shows relationship between:
In the broad context of comparing quality assurance activities and quality control activities in an IT organization, which of the following would be considered a quality assurance activity?
Organizations use many ways to determine the size of a program. Which of the following methods for measuring the size of a program can be used before the coding process is complete?
When contracting for software development, what is the correct sequence of events in the contracting life cycle?
The development of the approach for process deployment is much harder than the actual deployment of the process.
Which of the following is not a major component for quality management for the workgroup?
In which phase of the Quality Function's maturation does the organization's objectives move from Quality Control to Quality Assurance?
These five components (environment, risk assessment, control activities, information communication, and monitoring) are associated with which of the following control models:
Conducting software inspections would be considered which of the following cost-of-quality categories?
Which of the following processes is / are within the Defect Management level for maturing the Quality Control Processes?
Which of the following is the measurement of your current level of performance:
As the continuum of work processes move or evolve towards creative processes, the mix of written procedures and people skills change.
Laws and regulations affecting the products produced and operated are generally addressed in which planning activity:
A test case tested data values at 0, 9, 10, 11, 49, 50, 51, 100. Which black-box technique was most likely used to generate these data points.
If your IT organization adopted function points as the means to measure program size, this would enable you to estimate programming staff because you would know a program of 200 function points is twice as large as a program of 100 function points. This type of data is called:
While unit testing should be done, it is not necessary to spend the time and effort to develop and document the unit test plan and cases because it is conducted by the developers themselves.
When listening to a speaker, the speaker's verbal, vocal, and body channels always convey the same message.
Which of the following is the correct definition of the Quality Attribute Maintainability?
In the PDCA cycle, if a check detects an abnormality, then record the abnormality and continue the work per the procedure.
You have been requested to develop a “customer satisfaction” baseline. Even though many of the measures will be subjective, you have been told to make them quantitative when possible. Describe what quantitatively subjective means.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
One of the means to describe a work task or activity is a workbench; a workbench is a graphical representation of a work task. As a Quality Assurance Manager, one of your work tasks is to provide quality training for the IT staff. Describe the components on the workbench that you would use to train a single individual in the quality principles and indicate the entrance and exit criteria as well as the activity that you would perform for each component of the workbench.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
There are many potential risks associated with new technology. New technologies must be integrated without compromising software quality. The QA analyst has three roles in integrating new technology. Describe each of these roles of the QA analyst.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
What strategy should a Quality Manager recommend to senior management, if the organization wants to move from maturity level 2 to a higher level? Why?
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
One of the key attributes of an effective quality environment is integrity and ethical values. Briefly explain four ways that integrity and ethical values are established in a quality environment.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Two terms that are associated with quality management are mission and vision. Describe these two terms. Then, as a means of differentiating the two, briefly describe a mission for the quality assurance function and a vision for the quality assurance function.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
As the Test Manager of your project team you are responsible for tracking the defects and delivering a tested system, which is 'fit for use'. Design a defect tracking process so that the defects are prioritized and fixed on time.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
The following is an argument against measurement that was raised in a team meeting, "Measurement has a high cost, requires too much investment and the return is too low." Provide a counter-argument to that statement.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Describe the major components of acquisition life cycle for contracted software?
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
One of the steps recommended in any software development project is to identify risks and estimate the magnitude of those risks. This will assure that risks are properly addressed throughout the development process, as well as assuring that the high-magnitude risks will be recognized and addressed.
Your IT management has asked you how to best estimate the magnitude of a risk. List below what you believe would be a reasonable method your IT organization could use to determine the magnitude of a risk.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Explain how a Force Field Analysis is performed and used.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Your senior management wants to initiate a major process change in the organization and has asked you how to get people to follow the changed approach to the process. What tactics would you recommend for deploying the changed approach?
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Define the terms:
1. Preventive Controls
2. Detective Controls
3. Corrective Control.
List and describe two controls in each of these three categories of control.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
It is very important 'to evaluate how employees feel about their manager or leader' to assess the climate of a specific organization or group. An assessment of an organization's 'climate' discovers if the employees' satisfaction level is positive or negative.
How can quality be quantified? Provide an explanation and illustrate with an example.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
There are four main "testing stages" in a structured software development process. Name the four testing stages and describe what the primary purpose of that test stage is.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Describe five control methods for checking the quality of the work or product.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Dr. W. Edward Deming stated 14 Quality Principles for organizations to use in becoming a world-class organization. Listed below are four of Dr. Deming's Quality Principles.
Explain what you believe is required to implement each of these four quality principles.
1. Create consistency of purpose in the company.
2. Institute modern aids to training on the job.
3. Drive out fear.
4. Look carefully at work standards.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Event identification, control activities, and risk response are included in which of the following internal control models?
In addition to meeting business functions requirements, critical success factors must be present in COTS software for it to be successful. List and describe five critical success factors that should be included when evaluating COTS software.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Explain the PDCA cycle, and describe how the PDCA cycle can be used for continuous process improvement.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
In a measurement program 'managing by process' means to use processes to achieve the desired results. This phase consists of steps to implement measurement in a process by identifying the contributors to achieving the desired process results.
If a desired process result is to produce a work product on-time, identify three process contributors that could positively or negatively impact producing the work product on-time. For each of the contributors explain how you would measure it.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
The first question of the six basic quality planning questions is, "Where are we?". Describe what should be addressed in:
1. Business or Activity Planning
2. Environment Planning
3. Capabilities and Opportunities Planning
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Define the terms measurement dashboard and key indicators.
Type your answer in the box provided. Use options on the box toolbar to edit your response as needed before moving to the next question.
Process improvement is most effective when __________ are involved in improving the process.
An objective for conducting a 'baseline study' can be to identify quantitatively 'potential problems'.
The plan of organization in methods and procedures adopted by management to ensure that resource use is consistent with laws, regulations, and policies; that resources are safeguarded against waste, loss, and misuse; and that reliable data are obtained, maintained, and fairly disclosed in reports. The previous statement is the definition of:
Boundary analysis techniques are used to create test cases that divide equivalence partitioned groups.
For maturing the management process at Level 3, which of the following should be in focus?
Which of the following factors should NOT be considered when defining a Control Method?
If you use the PDCA cycle for managing processes, which activity is associated with the planning component?
The variable COUNTRY can have the response Afghanistan, Albania, … , Zimbabwe. The data type of the variable COUNTRY is:
From a control perspective, there are two systems that are needed to process business transactions. One is a system that processes transactions and the other is:
Evaluating and quantifying the risks, controls, and vulnerabilities is called _________ .
A process that is effected by an organization's board of directors, management, and other personnel, designed to provide reasonable assurance regarding the achievement of operations, reliability and financial reporting and compliance with applicable law and regulations is called:
When comparing the ratio of testers to developers in your organization with the ratio of testers to developers in another organization, this would be:
A type of "Review" where the producer of the material facilitates the review is a:
In the CobiT Model, defining and managing service levels, performance, problems and incidences is a component of:
Which of the following models uses this four part cyclE. (part one - plan and organize; part two - acquire and implement; part three - deliver and support; part four - monitor)?
If you had seven programs and the size in function points were 80, 20, 20, 60, 40, 50, and 150. What is the median size of those seven programs in function points?
Which of the following is NOT a component of a workbench? (A workbench is a graphic representation of a process.)
The person who accepts personal responsibility for the success of quality management without being assigned the responsibility is called____________ .
Which of the following activities should occur before processes are defined to ensure that the most critical processes are defined first.
The objective of integrating business and quality planning in a single planning cycle is to ensure that: