ISTQB certification exam questions for chapter Static techniques

Correct Answer : b

Correct Answer : b

Correct Answer : a

Explanation:
The correct answer is C. The analysis of program code because static analysis examines source code without executing it to detect defects and improve quality.

A. The analysis of batch programs is incorrect because static analysis is not limited to batch programs.
B. The reviewing of test plans is incorrect because reviewing is a static testing technique, not static analysis.
D. The use of black-box testing is incorrect because black-box testing is a dynamic testing technique that requires software execution.

Correct Answer : d

Explanation:
The correct answer is option 4. Reviews should be performed on specifications, code, and test plans because reviews are a static testing technique used to detect defects in any work product, including requirements, design documents, code, test cases, and test plans.

A. Reviews cannot be performed on user requirements specifications is incorrect because reviewing requirements is one of the most valuable applications of static testing.
B. Reviews are the least effective way of testing code is incorrect because reviews are highly effective at detecting defects early, before code execution.
C. Reviews are unlikely to find faults in test plans is incorrect because reviews are commonly used to identify defects and inconsistencies in test plans.

Correct Answer : d

Explanation:
The correct answer is D. Because they share the aim of identifying defects but differ in the types of defect they find. Both static testing and dynamic testing help improve software quality, but they detect different kinds of defects and therefore complement each other.

A. is incorrect because, although both aim to identify defects, they do not find the same types of defects.
B. is incorrect because both static and dynamic testing have the common objective of finding defects; their aims are not different.
C. is incorrect because static and dynamic testing detect different types of defects, not the same ones.

Correct Answer : b

Explanation:
The correct answer is B because static analysis examines work products, especially source code, without executing them, typically using automated tools to detect defects and maintainability issues.

A is incorrect because it describes a review, not static analysis.
C is incorrect because static analysis is not dynamic testing and is not limited to developers.
D is incorrect because black-box testing is a dynamic testing technique.

Correct Answer : b

Explanation:
The correct answer is B. Author because during the rework activity of a formal review, the author updates or fixes the work product based on the defects identified during the review.

A. Moderator is incorrect because the moderator plans, facilitates, and manages the review process.
C. Reviewer is incorrect because reviewers examine the work product and identify defects but do not perform the rework.
D. Recorder is incorrect because the recorder documents the defects, decisions, and review results.

Correct Answer : b

Explanation:
The correct answer is Inspection = 4 & 5, Peer Review = 3, Informal Review = 2, Walkthrough = 1.

Inspection is a formal review led by a trained moderator and follows defined entry and exit criteria.
Technical Review is conducted by peers without management participation.
Informal Review is the least formal review type and is typically undocumented.
Walkthrough is led by the author, who explains the work product to the participants.

Correct Answer : d

Explanation:
The correct answer is D. Inspection is appropriate even when there are no written documents because an inspection is a formal review technique performed on work products. Without a documented work product, an inspection cannot be conducted.

A. Inspection is the most formal review process is correct because it follows a structured process with defined roles and entry/exit criteria.
B. Inspections should be led by a trained moderator is correct because a moderator manages and facilitates the inspection process.
C. Managers can perform inspections on management documents is correct because any suitable work product, including management documents, can be inspected.
E. Inspection compares documents with predecessor (source) documents is correct because inspections verify consistency and correctness against the test basis or source documents.

Correct Answer : c

Explanation:
The correct answer is C. Whether the value stored in a variable is correct because static analysis does not execute the software. It cannot determine whether a variable contains the correct runtime value or whether the program produces the correct results.

A. The use of a variable before it has been defined is incorrect because static analysis tools can detect the use of uninitialized variables.
B. Unreachable ("dead") code is incorrect because static analysis can identify code that can never be executed.
D. The re-definition of a variable before it has been used is incorrect because static analysis can detect redundant or suspicious variable assignments.
E. Array bound violations is incorrect because static analysis tools can often identify potential out-of-bounds array accesses without executing the program.

Correct Answer : a

Explanation:
The correct answer is A because the purpose of a review is to identify defects and issues. The correction of defects (rework) is performed after the review, typically by the author.

B is incorrect because reviews evaluate the work product, not the person who created it.
C is incorrect because all review participants contribute to the effectiveness of the review.
D is incorrect because every review should have a clear objective to ensure it achieves its purpose.

Correct Answer : b

Explanation:
The correct answer is B. Requirement specifications, test cases, user guides because manual static testing (reviews) is performed on work products such as requirements, test cases, design documents, code, test plans, and user documentation.

A. Requirement specifications, test plan, code, memory leaks is incorrect because memory leaks are runtime defects detected through dynamic testing, not manual static testing.
B. Requirement specifications, test cases, user guides is correct because all are work products that can be reviewed without executing the software.
C. Requirement specifications, user guides, performance is incorrect because performance is a runtime characteristic evaluated through dynamic testing.
D. Requirement specifications, website, code, use cases is incorrect because a website is the executing software/system, not a work product reviewed by manual static testing. (The website's source code or design documents could be reviewed, but not the running website itself.)

Correct Answer : c

Explanation:
The correct answer is C. Developers and testers because static analysis tools help detect defects and maintainability issues without executing the software. They are primarily used by developers during coding but are also used by testers and other quality assurance roles.

A. Testers is incorrect because developers are the primary users of static analysis tools.
B. Developers is incomplete because testers also use static analysis results and tools.
D. None is incorrect because static analysis tools are widely used during software development.

Correct Answer : a

Explanation:
Statement Validation

I. Easy to get started and have some benefit
✅ True — Informal reviews require little preparation and can provide quick feedback.

II. Have no or minimal formal process
✅ True — Informal reviews have little or no defined review process.

III. The process must be documented
❌ False — Informal reviews do not require formal documentation or documented outputs.

IV. May include "paired programming"
✅ True — Pair programming is recognized by ISTQB as an example of an informal review.

Correct Answer : b

Explanation:
The correct answer is B. Scribe because the scribe (also called the recorder) is responsible for documenting all defects, issues, decisions, and open points identified during the review meeting.

A. Moderator is incorrect because the moderator plans, leads, and facilitates the review but does not record the review findings.
C. Reviewers are incorrect because their role is to examine the work product and identify defects, not to document them.
D. Author is incorrect because the author explains the work product and performs the rework after the review.

Correct Answer : d

Explanation:
The correct answer is D. Plan the scope of the review because the review planning phase defines the purpose, scope, work products to be reviewed, participants, entry/exit criteria, schedule, and resources required for the review.

A. Log defects is incorrect because defects are documented during the review meeting by the recorder (scribe), not during planning.
B. Explain the documents to the participants is incorrect because this occurs during the review meeting, typically led by the author.
C. Gather metrics is incorrect because review metrics are collected during or after the review, not as the primary purpose of the planning phase.

Correct Answer : b

Explanation:
The correct answer is B. Dynamic testing because dynamic testing requires the software to be executed to observe its actual behaviour and detect failures.

A. Formal inspection is incorrect because it is a static testing technique that reviews work products without executing the software.
C. Code walkthrough is incorrect because it is also a static review in which the code is examined without execution.
D. Execution testing is incorrect because "Execution testing" is not an ISTQB-defined testing type. The correct term is Dynamic Testing.

Correct Answer : b

Explanation:
The correct answer is B. Developers and testers because static analysis tools examine source code and other work products without executing the software. Developers use these tools to detect coding defects early, while testers use the results to improve software quality and support testing activities.

A. Customers and users is incorrect because they use the software but do not perform static analysis.
C. Business analysts is incorrect because they mainly work with business requirements rather than source code analysis.
D. End users is incorrect because they evaluate the software during use, not through static analysis.

Correct Answer : d

Explanation:
The correct answer is D. Enforcement of coding standards because static analysis tools automatically check source code for compliance with coding standards, programming guidelines, and common coding errors without executing the software.

A. Supporting reviews is incorrect because reviews are performed by people. Static analysis tools can support reviews by providing findings, but this is not their primary use.
B. Validating models of the software is incorrect because model validation is not the primary purpose of static analysis tools in CTFL.
C. Testing code executed in a special test harness is incorrect because this involves dynamic testing, where the software is executed.

Correct Answer : d

Explanation:
The correct answer is D. All of the above because reviews are effective at detecting requirement defects, design defects, and deviations from standards before the software is executed.

A. Deviations from standards is correct because reviews can identify violations of coding, documentation, or organizational standards.
B. Requirement defects is correct because reviews help detect ambiguous, incomplete, inconsistent, or incorrect requirements early.
C. Design defects is correct because design documents can be examined to identify errors before implementation.
D. All of the above is correct because reviews are well suited to finding all these types of defects.

Correct Answer : a

Explanation:
Explanation

The correct answer is A. Identifying defects because reviews, static analysis, and dynamic testing all have the common objective of identifying defects and improving software quality. However, they use different techniques and detect different types of defects.

B. Fixing defects is incorrect because finding defects is the objective of testing; fixing them is part of debugging or rework, not testing.
C. A and B is incorrect because testing identifies defects but does not fix them.
D. None of the above is incorrect because identifying defects is a common objective of all three activities.

Correct Answer : a

Explanation:
The correct answer is A because a formal review begins with planning, followed by review initiation (kick-off) and individual preparation. After the review meeting (if one is held), the author performs rework, and finally the moderator performs follow-up to ensure all agreed actions have been completed.

B is incorrect because it skips the review initiation (kick-off) and places individual preparation after the review meeting.
C is incorrect because planning must occur before any preparation.
D is incorrect because follow-up is the final activity, after rework.

Correct Answer : b

Explanation:
The correct answer is B. Wait for the reviewer to finish, acknowledge the comment, and invite other reviewers to share their opinions. This is the moderator's responsibility in a review meeting to ensure balanced participation, encourage collaboration, and maintain a constructive review environment.

A. is incorrect because interrupting or confronting a reviewer may create conflict and discourage open communication.
C. is incorrect because skipping the discussion does not solve the problem of one person dominating the meeting.
D. is incorrect because the moderator should remain neutral and facilitate the discussion rather than influence it by expressing personal opinions.

Correct Answer : a

Explanation:
The correct answer is A. Find defects because the primary objective of an informal review is to identify defects in a work product quickly and with minimal overhead. Informal reviews are simple, flexible, and can be performed without a formal review process.

B. Produce formal review metrics is incorrect because informal reviews generally do not require formal documentation or metrics.
C. Approve the work product for release is incorrect because approval is typically part of more formal review types, such as inspections.
D. Define coding standards is incorrect because coding standards are established by the organization or project, not through an informal review.

Correct Answer : a

Correct Answer : c

Explanation:
The correct answer is C. Whether the software produces the correct output for a given input because static analysis examines work products without executing the software. It cannot verify the software's runtime behaviour or correctness of results.

A. Use of an uninitialized variable is incorrect because static analysis tools can detect this type of defect.
B. Unreachable ("dead") code is incorrect because static analysis can identify code that can never be executed.
D. Potential array bound violations is incorrect because static analysis tools can often detect possible out-of-bounds array accesses without running the software.

Correct Answer : b

Explanation:
The correct answer is "i, iii, iv are true and ii is false."

i is correct because inspections are led by a trained moderator, not by the author.
ii is incorrect because inspections require individual preparation before the review meeting.
iii is correct because inspections include a formal follow-up to ensure that identified defects have been addressed.
iv is correct because the primary objective of an inspection is to detect defects (anomalies) in the work product.

Correct Answer : c

Explanation:
The correct answer is i, ii, iii, v, iv because the review process begins with planning, followed by review initiation, where participants receive the work product and review information. Reviewers then perform an individual review before discussing findings during communication and analysis. Finally, the author performs fixing (rework) and the review results are reported.

i, ii, iii, iv, v is incorrect because communication and analysis must occur before fixing and reporting.
v, i, ii, iii, iv is incorrect because planning is always the first activity.
i, v, iii, ii, iv is incorrect because communication and analysis cannot occur before review initiation and individual review.

Correct Answer : c

Explanation:
The correct answer is C. i, ii, iii and iv because these are the standard roles defined in the ISTQB review process.

Author creates the work product and performs rework after the review.
Moderator plans, leads, and facilitates the review.
Reviewer examines the work product to identify defects and provide feedback.
Recorder (Scribe) documents the defects, issues, and decisions made during the review.

Correct Answer : a

Explanation:
The correct answer is A. Static testing requires the running of tests through the code because static testing is performed without executing the software.

A. is false because static testing examines work products without running the code.
B. is correct because informal review is a form of static testing.
C. is correct because static testing includes review techniques such as reviews and inspections.
D. is correct because static analysis tools can calculate software metrics such as cyclomatic complexity.

Correct Answer : b

Explanation:
he correct answer is B. Scribe because the scribe (also called the recorder) is responsible for documenting all defects, issues, decisions, and open points identified during a formal review.

A. Moderator is incorrect because the moderator plans, organizes, and facilitates the review but does not record the review findings.
C. Author is incorrect because the author creates the work product and performs the rework after the review.
D. Manager is incorrect because a manager may sponsor or support the review but is not responsible for documenting review findings.

Correct Answer : d

Correct Answer : a

Explanation:
The correct answer is A because a walkthrough is typically led by the author, who explains the work product to the participants. Reviewers ask questions, provide feedback, and help identify defects while gaining a better understanding of the work product.

B. is incorrect because a trained moderator and formal entry/exit criteria are characteristics of an inspection, not a walkthrough.
C. is incorrect because walkthroughs do not require formal metrics.
D. is incorrect because walkthroughs are manual review techniques, whereas static analysis tools perform automated analysis without human discussion.

Correct Answer : b

Correct Answer : d

Explanation:
The correct answer is D. All of the above because static testing can be performed throughout the software development lifecycle. Reviews and static analysis can be applied to requirements, design documents, source code, test cases, and other work products without executing the software.

A. Requirements is incorrect because static testing is not limited to the requirements phase; requirements are one of many work products that can be reviewed.
B. Design is incorrect because design documents can be reviewed, but static testing is also performed in other phases.
C. Coding is incorrect because static analysis and code reviews are performed during coding, but static testing is not restricted to this phase.
D. All of the above is correct because static testing is applicable during the requirements, design, and coding phases.

Correct Answer : c

Explanation:
Statement Validation

I. Clear objectives for each review
✅ True – Every review should have clearly defined objectives to ensure it achieves its intended purpose.

II. Checklists and/or roles are used to increase effectiveness of defect identification
✅ True – Well-defined roles and review checklists improve the effectiveness and consistency of reviews.

III. There is an emphasis on process improvement
✅ True – Reviews help improve both the quality of work products and the development/testing processes.

IV. People issues and psychological aspects are not reviewed
❌ False – ISTQB emphasizes that reviews should consider human factors and psychological aspects. Reviews should focus on the work product, not the author, and be conducted in a constructive and collaborative manner.

Correct Answer : c

Explanation:
The correct answer is C. Moderator because the moderator is responsible for planning the review, leading the review meeting, ensuring the review process is followed, and performing the follow-up after the review to verify that agreed actions have been completed.

A. Reviewer is incorrect because reviewers examine the work product to identify defects and provide feedback, but they do not manage the review.
B. Author is incorrect because the author creates the work product and performs the rework after the review but does not lead the review.
D. Auditor is incorrect because an auditor evaluates compliance with standards or processes and is not a defined role in the ISTQB review process.

Correct Answer : a

Explanation:
The correct answer is A. Inspection because an inspection is the most formal review type. It is led by a trained moderator, follows a defined process with entry and exit criteria, and is conducted to detect defects and improve the quality of work products.

B. Walkthrough is incorrect because it is led by the author and is less formal.
C. Technical Review is incorrect because it is more formal than a walkthrough but does not require the strict process of an inspection.
D. Informal Review is incorrect because it has little or no formal process and minimal documentation.

Correct Answer : a

Explanation:
Explanation

The correct answer is A. Checklist because a checklist is a list of questions or items used during a review to verify the completeness, correctness, and quality of a work product. It helps reviewers identify common defects consistently.

B. Checkpoint review is incorrect because this is not an ISTQB-defined review artifact or technique.
C. Decision table is incorrect because it is a black-box test design technique used to represent combinations of conditions and actions, not to guide reviews.
D. Decision tree is incorrect because it models decision logic and execution paths, not review questions.

Correct Answer : d

Explanation:
The correct answer is D. All Above because static analysis tools can detect a wide range of defects and code quality issues without executing the software, including coding standard violations, use of uninitialized variables, and many types of potential security vulnerabilities.

A. Programming standard violations is correct because static analysis tools can automatically detect violations of coding standards and best practices.
B. Referring a variable with an undefined value is correct because static analysis can identify the use of uninitialized variables.
C. Security vulnerabilities is correct because many static analysis tools can detect common security weaknesses, such as unsafe coding practices and potential injection vulnerabilities.
D. All Above is correct because all of the listed defects can be identified using static analysis.

Correct Answer : d

Explanation:
The correct answer is D. Planning, Review initiation, Individual review, Communication and analysis, Fixing and reporting.
A. Initiation, Preparation, Informal Review Meeting, Status, Rework, and Follow up is incorrect because it includes non-standard activities such as Status and Informal Review Meeting, and does not follow the CTFL review process.
B. Planning, Preparation, Technical Review, Rework, and Closure is incorrect because Technical Review is a review type, not a review activity.
C. Preparation, Inspection, Rework, Closure, and Follow up is incorrect because Inspection is also a review type, not a stage in the review process.
D. Planning, Review initiation, Individual review, Communication and analysis, Fixing and reporting is correct.

Correct Answer : a

Correct Answer : b

Explanation:
The correct answer is B because the moderator plans and facilitates the review, ensures the review process is followed, encourages constructive participation, and helps resolve disagreements among reviewers.

A. is incorrect because documenting review findings is the responsibility of the Recorder (Scribe).
C. is incorrect because creating the work product is the responsibility of the Author.
D. is incorrect because approving software for release is a management responsibility, not a moderator's role.

Correct Answer : c

Explanation:
The correct answer is C. Faults in the requirements because static code analysis analyzes source code without executing it. It cannot detect defects that originate in the requirements specification.

A. Unreachable code is incorrect because static analysis tools can identify code that can never be executed.
B. Undeclared variable is incorrect because static analysis tools can detect variables that are used without being declared.
C. Faults in the requirements is correct because these defects exist in the requirements documentation and must be detected through requirements reviews, not code analysis.
D. Too few comments is incorrect because static analysis tools can check compliance with coding standards, including insufficient or missing comments where required.

Correct Answer : a

Explanation:
The correct answer is A. With static analysis, defects can be found that are difficult to find with dynamic testing because static analysis examines work products without executing the software and can detect issues such as coding standard violations, dead code, uninitialized variables, and maintainability problems that may not be revealed during dynamic testing.

B. Compiling is not a form of static analysis is incorrect because compilers perform static checks, such as detecting syntax errors and some semantic issues, although compilation itself is not considered a complete static analysis technique.
C. When properly performed, static analysis makes functional testing redundant is incorrect because static analysis complements, but does not replace, dynamic (functional) testing.
D. Static analysis finds all faults is incorrect because no testing or analysis technique can detect every defect.

Correct Answer : a

Explanation:
The correct answer is A. Gives quality information about the code without executing it because static analysis tools examine source code or other work products without running the software. They help identify defects, coding standard violations, complexity issues, maintainability problems, and potential security vulnerabilities.

A. is correct because static analysis evaluates code quality without execution.
B. Checks expected results against actual results is incorrect because this is done during dynamic testing, where the software is executed.
C. Can detect memory leaks is incorrect because memory leaks are typically identified during dynamic testing. Although some advanced static analysis tools can detect potential memory leak situations, this is not their primary function in CTFL.
D. Gives information about what code has and has not been exercised is incorrect because this refers to code coverage analysis, which requires program execution.

Correct Answer : d

Explanation:
The correct answer is a, b and d are true; c and e are false because static analysis tools examine source code without executing it and can detect many coding defects early in development.

(a) Variables that are never used is correct because static analysis can identify unused variables that may indicate redundant or incomplete code.
(b) Programming standard violations is correct because static analysis tools automatically detect violations of coding standards and best practices.
(c) Poor performance is incorrect because actual performance is measured through dynamic performance testing, which requires software execution.
(d) Unreachable code is correct because static analysis can identify code that can never be executed.
(e) Business processes not followed is incorrect because business process compliance is outside the scope of static analysis and is typically verified through reviews or business validation.

Correct Answer : c

Explanation:
The correct answer is C. Testers and reviewers communicate defects as criticism against persons and not against the software product because this creates conflict, reduces collaboration, and discourages constructive reviews. ISTQB emphasizes that reviews should focus on the work product, not the author, and feedback should always be respectful and objective.

A. Testers and reviewers are not curious enough to find defects is incorrect because lack of curiosity may reduce review effectiveness, but it does not necessarily create conflict within the team.
B. Testers and reviewers are not qualified enough to find failures and faults is incorrect because insufficient skills affect review quality, but this is primarily a competence issue rather than a cause of interpersonal conflict.
D. Testers and reviewers expect that the defects have already been found and fixed by the developers is incorrect because this reflects an assumption about software quality, not a behavior that directly creates conflict during reviews.

Correct Answer : c

Correct Answer : d

Explanation:
The correct answer is D. Static analysis is a good way to force failures into the software because static analysis does not execute the software. Therefore, it cannot cause or observe failures. Its purpose is to identify defects in work products before execution.

A. Static analysis can be used as a preventive measure with appropriate process in place is incorrect because this statement is true. Static analysis helps detect defects early and supports defect prevention.
B. Static analysis can find defects that are not easily found by dynamic testing is incorrect because this statement is true. For example, static analysis can detect unreachable code, coding standard violations, and uninitialized variables.
C. Static analysis can result in cost savings by finding defects early is incorrect because this statement is true. Detecting defects early reduces the cost of fixing them later in the software lifecycle.
D. Static analysis is a good way to force failures into the software is false because failures can only be observed when software is executed during dynamic testing.