Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

BCS CTFL4 Exam - Topic 2 Question 43 Discussion

Posted by Jesusita on Jun 17, 2026 at 11:25 AM

Consider the following examples of risks identified in different software development projects

[1]. It may not be possible to generate the expected workloads to run performance tests, due to the poor hardware equipment of the machines (load injectors) that should generate these workloads.

[ii]. A user's session on a web application is not invalidated after a certain period of inactivity (configured by the system administrator) of the user,

[iii]. The test team will not have an adequate requirements specification (since many requirements will still be missing) by the time test design and analysis activities should begin according to the test plan.

[IV]. Following a failure, the system is unable to continue to maintain its pre-failure operation and some data becomes corrupted.

Which of the following statements is TRUE?

Suggested Answer: A

In software testing, risks are categorized into product risks and project risks. Product risks are associated with the potential of a product to fail in meeting its quality criteria. Project risks are related to potential issues that could affect the project's ability to deliver a product.

[i] is a project risk because it concerns the availability and adequacy of hardware resources for performance testing.

[ii] is a product risk because it pertains to a security and functionality issue within the web application.

[iii] is a project risk because it involves the availability of necessary requirements documentation for the testing process.

[iv] is a product risk because it relates to the system's functionality and data integrity after a failure.

Thus, statement A correctly classifies [ii] and [iv] as product risks and [i] and [iii] as project risks.


Get Premium CTFL4 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
RO
Ronna 2 months ago
Option D seems right to me. Performance tests are project-related, while data corruption is a product risk.
AL
Alexia 2 months ago
I lean towards option C. The session issue feels like a product risk.
GE
Gerri 3 months ago
I think option A makes sense. Product risks are about the software itself.
AN
Angelica 3 months ago
I think D) is a bit off, [IV] feels more like a product risk to me.
JO
Josue 3 months ago
[iii] is definitely a project risk, no doubt about it!
TO
Tom 3 months ago
Surprised that [ii] is considered a product risk, isn't that a basic security issue?
LE
Leonor 3 months ago
I disagree, I think C) makes more sense.
TI
Timothy 3 months ago
A) seems right, product risks are about the product itself.
SH
Shonda 4 months ago
I practiced a similar question, and I think [ii] and [IV] are product risks, but I’m not confident about the others.
VA
Val 4 months ago
I think [iii] is a product risk too, but I’m confused about how to classify [IV]. It seems like both could be project risks.
MI
Minna 4 months ago
I'm not entirely sure, but I feel like [i] is more of a project risk because it relates to the resources we have for testing.
BR
Britt 4 months ago
I remember discussing product risks in class, and I think [ii] definitely falls under that category since it affects user experience.
0/2000 characters

Save Cancel