Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISTQB-CTFL Exam - Topic 3 Question 50 Discussion

Posted by Tamie on Nov 19, 2025 at 05:08 PM

An alphanumeric password must be between 4 and 7 characters long and must contain at least one numeric character, one capital (uppercase) letter and one lowercase letter of the alphabet.

Which one of the following sets of test cases represents the correct outcome of a two-value boundary value analysis applied to the password length? (Note: test cases are separated by a semicolon)

Suggested Answer: D

The correct outcome of a two-value boundary value analysis applied to the password length is the set of test cases represented by option D. Boundary value analysis is a test design technique that focuses on the values at the boundaries of an equivalence partition, such as the minimum and maximum values, or the values just above and below the boundaries. A two-value boundary value analysis uses two values for each boundary, one representing the valid value and one representing the invalid value. For example, if the valid range of values is from 4 to 7, then the two values for the lower boundary are 3 and 4, and the two values for the upper boundary are 7 and 8. The test cases in option D use these values for the password length, while also satisfying the other requirements of the password, such as containing at least one numeric character, one capital letter, and one lowercase letter. The test cases in option D are:

1RhT: a 4-character password that is valid

rSp53: a 5-character password that is valid

3N3e10: a 6-character password that is valid

8sBdby: an 8-character password that is invalid The test cases in the other options are incorrect, because they either use values that are not at the boundaries of the password length, or they do not meet the other requirements of the password. For example, the test cases in option A are:

1xA: a 3-character password that is invalid, but it does not contain a capital letter

aB11: a 4-character password that is valid

Pq1ZZab: a 7-character password that is valid

7iDD0a1x: an 8-character password that is invalidReference: ISTQB Certified Tester Foundation Level (CTFL) v4.0 sources and documents:

ISTQB Certified Tester Foundation Level Syllabus v4.0, Chapter 2.2.1, Black-box Test Design Techniques1

ISTQB Glossary of Testing Terms v4.0, Boundary Value Analysis, Equivalence Partition2


Get Premium ISTQB-CTFL Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
30 comments · newest first
DE
Devora 6 months ago
A is the only one that fits perfectly.
ED
Edgar 6 months ago
D fails the length criteria.
RI
Rikki 6 months ago
Option C has too many characters.
ME
Melynda 7 months ago
B has invalid lengths though.
JU
Justine 7 months ago
I prefer option B.
ME
Melynda 7 months ago
Why A?
TR
Tricia 8 months ago
Totally agree with A being the best choice!
NA
Narcisa 8 months ago
Wait, are we sure D is even valid?
LO
Louvenia 8 months ago
C has too many characters in some cases.
EL
Elizabeth 8 months ago
A is the only one that fits the length requirement.
AN
Annmarie 8 months ago
Haha, "alphanumeric password" - sounds like a secret agent's code!
GA
Gaston 8 months ago
D seems a bit too easy, don't you think?
LO
Lonny 9 months ago
I'm pretty sure the answer is C. Gotta love those boundary cases!
JA
Jaime 9 months ago
B looks good to me.
RE
Rene 9 months ago
Option D seems off because it includes an 8-character password, which doesn't fit the criteria. I think I need to double-check the others.
BO
Boris 9 months ago
I practiced similar questions, and I recall that the minimum length should be 4 characters. I’m leaning towards option B, but I’m not entirely confident.
LA
Lavelle 9 months ago
I'm feeling pretty confident about this one. I've practiced a lot of these types of questions, so I think I can knock this out quickly.
GE
German 9 months ago
Okay, I've got a strategy - I'll start by testing the minimum and maximum password lengths, then make sure I have test cases that cover the character requirements.
CO
Coletta 10 months ago
I think option A has a good mix of lengths, but I feel like I might be missing something about the specific requirements for numeric and letter combinations.
BE
Ben 10 months ago
I think option A is correct.
KE
Keena 10 months ago
I remember we discussed boundary value analysis in class, but I'm not sure which option correctly represents the length requirements.
JU
Julene 10 months ago
I think B has valid cases too, but not sure.
BE
Ben 10 months ago
It meets all length requirements.
LI
Linette 11 months ago
Hmm, I'm a bit confused by the wording of the question. I'll need to re-read it a few times to make sure I understand the exact requirements.
FE
Felix 11 months ago
This looks like a classic boundary value analysis problem. I'll need to think carefully about the edge cases for the password length and character requirements.
EZ
Ezekiel 5 months ago
↳ replying to Felix
Sounds like a solid choice then!
AN
Annabelle 5 months ago
↳ replying to Felix
It has uppercase, lowercase, and numbers.
ID
Idella 6 months ago
↳ replying to Felix
But does it meet all character requirements?
YA
Yaeko 6 months ago
↳ replying to Felix
Yeah, it covers the 4 to 7 characters.
MA
Marti 6 months ago
↳ replying to Felix
I think option A has the right length.
0/2000 characters

Save Cancel