ISQI ISTQB Certified Tester Advanced Level - Test Automation Engineering CTAL-TAE (Syllabus v2.0) : CTAL-TAE_V2

Which of the following is the BEST example of how static analysis tools can help improve the test automation code quality in terms of security?

• A. Static analysis tools can help detect the presence of repeated instances of code within test automation code
• B. Static analysis tools do not generate false positives when attempting to detect security vulnerabilities within test automation code
• C. Static analysis tools can help detect hard-coded credentials that expose sensitive information within test automation code
• D. Static analysis tools can ensure there are no security vulnerabilities within test automation code

Which one of the following answers does NOT refer to an example of configuration item(s) that should be specified in development pipelines to identify a test environment (and its specific test data) associated with a web app under test on which to execute automated tests?

• A. The base URL of the test environment where the web app is deployed (i.e., the root address for accessing the web app)
• B. The URLs of web APIs/web services related to the web app's backend within the test environment where the app is deployed
• C. The connection string(s) to connect to the test database(s) within the test environment where the web app is deployed
• D. The number and type of automated tests to execute in the test environment where the web app is deployed

A SUT (SUT1) is a client-server system based on a thin client. The client is primarily a display and input interface, while the server provides almost all the resources and functionality of the system. Another SUT (SUT2) is a client-server system based on a fat client that relies little on the server and provides most of the resources and functionality of the system. A given TAS is used to implement automated tests on both SUT1 and SUT2. The main objective of the TAS is to cover as many system functionalities as possible through automated tests executed as fast as possible. Which of the following statements about the automation solution is BEST in this scenario?

• A. The TAS should support mainly server-side automation for SUT1 and client-side automation for SUT2
• B. The TAS should support mainly client-side automation for both SUT1 and SUT2
• C. The TAS should support mainly server-side automation for both SUT1 and SUT2
• D. The TAS should support mainly client-side automation for SUT1 and server-side automation for SUT2

An API's response to a request made to the corresponding endpoint should return some specific data about a payment transaction in JSON format. In particular, your goal is to write the test automation code, keeping it as short as possible, aimed at determining whether that response includes certain properties (transaction_id, amount, status, timestamp) with the data types and formats expected. Assuming that the TAF provides all the necessary support to validate the specified API response, how would you BEST achieve your goal?

• A. Write a single assertion for each property to check whether the data types and formats for that property are as expected in the actual response
• B. Use an artificial intelligence algorithm based on machine learning and image recognition to implement a self-healing capability
• C. Write custom code that parses the actual response data and checks whether the extracted properties, data types, and formats are as expected
• D. Specify the schema for the expected response data (properties, data types, and formats) and validate the actual response data against this schema

You have agreed with your organization's managers to conduct a pilot project to introduce test automation.
Managers' expectations about the benefits of automation are too optimistic. Which of the following is LEAST relevant when deciding the scope of the pilot project's objectives?

• A. Evaluate the performance of an organization's network infrastructure in terms of factors such as availability, bandwidth, latency, packet loss, and jitter
• B. Evaluate the suitability of different test automation tools based on the technology stack used by the applications for which the automated tests will be developed
• C. Evaluate the knowledge and skills of people who will be involved in automating test cases for applicable test automation frameworks and technologies
• D. Evaluate the potential cost savings and benefits (e.g., faster test execution, better test coverage) of using automated testing versus manual testing