BCS TM12 Exam - Topic 8 Question 32 Discussion

Actual exam question for BCS's TM12 exam

Question #: 32
Topic #: 8

[All TM12 Questions]

You can count on well-written requirements, but you can't count on an adequate contribution of the stakeholders to the quality risk analysis. You have to mitigate the insufficient contribution of the stakeholders because the risk-based testing approach shall minimize the product risks. Your test team has one expert tester in security testing.

Which of the following test activities would you expect to be the less important in this context?

Number of correct responses: 1

AExtract from the defect tracking system of the previous project all the security defects and failures, and classify them to support design and execution of specific tests

BAutomate all functional and non-functional system tests

CApply systematic and exploratory testing for integration and system test

DPerform exploratory testing sessions with adequate charters covering security aspects

Show Suggested Answer

Suggested Answer: B

by Marguerita at May 06, 2022, 11:26 PM

Limited Time Offer

25%

Off

Get Premium TM12 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Avery

5 months ago

Definitely need to focus on exploratory testing over automation in this case.

upvoted 0 times

...

Tarra

5 months ago

I’d say option A is also pretty low on the list.

upvoted 0 times

...

Earleen

5 months ago

Wait, why wouldn't we automate? Seems like a missed opportunity.

upvoted 0 times

...

Katlyn

5 months ago

Totally agree, automation isn't the priority with limited stakeholder input.

upvoted 0 times

...

Soledad

6 months ago

I think option B is the least important here.

upvoted 0 times

...

Truman

6 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the options and consider what I know about AEM as a Cloud Service and its support for OSGi configuration runmodes.

upvoted 0 times

...

Wei

6 months ago

Aha, I think the incident response policy is the way to go here. That's where I'd expect to find the details on how the CSP notifies customers after a data breach.

upvoted 0 times

...

Donte

6 months ago

I'm a bit confused here. Is a secondary zone really the first zone where updates are written? That doesn't sound right, but I want to double-check the definition before answering.

upvoted 0 times

...

Jill

6 months ago

Hmm, I remember something about firms in monopolistic competition having more flexibility in pricing... maybe D?

upvoted 0 times

...