You are involved in testing a system in the medical domain. Testing needs to comply with the FDA requirements and is rated as being safety critical. A product risk assessment has been performed and various mitigation actions have been identified. Reliability testing is one of the test types that needs to be performed throughout the development lifecycle.
Based on the information provided, which of the following activities would need to be addressed in the test plan?

• A. Testing whether the installation/de-installation can be completed.
• B. Design and execution of specific tests that evaluate the software's tolerance to faults in terms of handling unexpected input values.
• C. Design and execution of test cases for scalability.
• D. Perform a vulnerability scan.

Subject to testing is a software system (COTS) for Project Administration and Control (PACS). PACS is a multi-project system for controlling the project time, e.g., in terms of scheduling and tracking, and managing the productivity of projects, e.g., in terms of effort and deliverables.
During various interviews with stakeholders the following information was gathered:
* Using PACS is not business critical. There is no impact such as high financial losses or problems to the operational continuity of an organization. Its application is not critical since the software package does not support directly the operational, or the primary, business processes of an organization. It supports (project) management in the project planning and tracking process. Of course, it will be highly annoying for users if the system "goes down" from time to time. Although this does not have a high impact for the business process as a whole, the Mean Time Between Failures (MTBF) still needs to be at a good level to be successful in the market.
* Users of PACS typically have an academic educational level, but have no prior experience with this particular type of project management software. The system will be used by a large number of users within an organization.
* The system will be used on a regular basis, e.g., several times per day by project managers and several times per week by project employees. This means that the system will not be used very intensively, often only for some data input or an information request. Its usage is not considered to be very time-critical.
* The data is recorded on-line and real-time. The system is expected to run in multiple hardware environments in various network environments. It is also expected that changes in the operational environments will happen in the upcoming period that also need to be supported.
Based on the information provided by the stakeholder, which combination of non-functional quality characteristics should you propose to test as part of your test approach?

• A. Reliability and Portability
• B. Performance efficiency and Portability
• C. Security and Reliability
• D. Reliability and Performance efficiency

Which of the following is a valid reason for including security testing in a test approach?

• A. To provide measurements from which an overall level of availability can be obtained.
• B. There is a threat of unauthorized copying of applications or data.
• C. To evaluate the ability of a system to handle peak loads at or beyond the limits of its anticipated or specified workloads
• D. Software changes will be frequent after it enters production.

Consider the following control flow graph:

The control flow represents a software component of a car navigation system. Within the project the maximum cyclomatic complexity to be allowed is set at 5.
Which of the following statements is correct?

• A. A defect needs to be reported since the cyclomatic complexity of the component is calculated at 6.
• B. No defect needs to be reported since the cyclomatic complexity of the component is calculated at 5.
• C. No defect needs to be reported since the cyclomatic complexity of the component is calculated at 3.
• D. No defect needs to be reported since the cyclomatic complexity of the component is calculated at 4

A component has been analysed during a risk-assessment and rated as highly critical. Which of the following white-box test techniques provides the highest level of coverage and could therefore be used to test this component?

• A. Multiple condition testing
• B. Statement testing
• C. Decision testing
• D. Modified condition/decision testing