Official Bank 0/64

Certified Tester Advanced Level Test Management (CTAL-TM) v3.0 (CTAL-TM v3.0) - ISTQB Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
64 Total Questions
1
Question
Assume you are working on a CAS (Conditional Access System) for Pay-TV that allows the access, selection and transfer of services and media to authorized users. Authorized users can choose their services through different channels: Web Customer Portal, IVR (Interactive Voice Response), Call Centre and SMS. The system uses a Smart Card to receive and decrypt the broadcasted encrypted control words which allow decrypting pay-per-view TV. Every authorized user must have a Smart Card and a Set-Top Box to view the contents.

The following is an excerpt from the product risk analysis document: Both likelihood and impact have been rated on the following scale: (1 – Very low, 2 – Low, 3 – Medium, 4 – High, 5 – Very High). The required test environment and code have been delivered. All test cases for each identified product risk item have been written and are ready to be executed. The Database used to contain the Smart Cards is empty and so only new Smart Cards can be used during test execution. A Smart Card can only be activated if it has been previously pre-activated. This means the postconditions for the execution of the test cases to test the pre-activation of the Smart Card are the pre-conditions for activation of the Smart Card. Which of the following statements represents the most effective contribution of the stakeholders to the completion of the failure mode analysis table?

Exhibit

K4 3 credits
Options
A The aircraft pilot and the customer representative should contribute to assess the detection. The chief software engineer, the system architect and the expert tester should contribute to assess the priority.
B The aircraft pilot and the customer representative should contribute to assess the priority. The chief software engineer, the system architect and the expert tester should contribute to assess the detection.
C The aircraft pilot is the only one qualified to contribute to assess the priority and thus should be assigned this task. The customer representative should contribute to assess the detection.
D The system architect and the chief software engineer should contribute to assess the priority. The expert tester is the only one who should contribute to assess the detection.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Consider the following list of statements about audits and management reviews:

I. Audits are usually more effective than management reviews at finding defects
II. Audits and management reviews have the same main goals, the only difference is related to the roles and level of formality III. A typical outcome of an audit includes observations and recommendations, corrective actions and a pass/fail assessment IV. An audit is not the appropriate mechanism to use at the code review in order to detect defects prior to dynamic testing

Which of the following statements is true? K2 1 credit A.

I. and III. are true; II. and IV. are false;
Options
A II. and III are true;
I. and IV. are false;
B I, III and IV are true; II. is false;
C III. and IV. are true; I and II are false;
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Assume that you are the Test Manager for a small insurance application development project. You have decided to adopt a risk-based testing strategy: 5 product risks (R1, R2, R3, R4, R5) have been identified and their levels of risk have been assessed. 10 test cases (T1, …, T10) have been designed to cover all the product risks. The following table shows the risk level and the test cases associated to the identified product risks (higher risk level means higher risk): You are not confident with the assessment of the risk level and you suspect that it will be possible to find high-priority bugs in low-risk areas.

Exhibit

Furthermore the period for test execution is very short. Your goal is to test all the product risks in a risk-based way, while assuring that each product risk gets at least some amount of testing. Which of the following answers describes the best test execution schedule in this scenario? K3 2 credits
Options
A T1, T2, T3, T4, T5, T6, T7, T8, T9, T10
B T1, T3, T5, T7, T9, T2, T4, T6, T8, T10
C T10, T8, T6, T4, T2, T9, T7, T5, T3, T1
D T10, T9, T8, T7, T6, T5, T4, T3, T2, T1
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Assume you are the Test Manager for a new software release of an e-commerce application. The server farm consists of six servers providing different capabilities. Each capability is provided through a set of web services. The requirements specification document contains several SLAs (Service Level Agreements) like the following: SLA-001: 99.5 percent of all transactions shall have a response time less than five seconds under a load of up-to 5000 concurrent users The main objective is to assure that all the SLAs specified in the requirements specification document will be met before system release. You decide to apply a risk-based testing strategy and an early risk analysis confirms that performance is high risk. You can count on a well-written requirements specification and on a model of the system behavior under various load levels produced by the system architect.

Which of the following test activities would you expect to be the less important ones to achieve the test objectives in this scenario? K4 3 credits
Options
A Perform unit performance testing for each single web service
B Monitor the SLAs after the system has been released into the production environment
C Perform static performance testing by reviewing the architectural model of the system under various load levels
D Perform system performance testing, consisting of several performance testing sessions, to verify
if all the SLAs have been met
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Which of the following statements about management of product quality risks in mature organizations with respect to the lifecycle, is true? K2 1 credit
Options
A Mature organizations are aware that the contribution of testing to analysis of product quality risks is very important. The analysis should occur throughout the entire lifecycle
B Mature organizations address product quality risks associated to non-functional characteristics only during the system test phase
C Mature organizations are aware that risk management of product quality risks only occurs during testing
D Mature organizations don’t waste time identifying the sources of risks. They only focus on identifying product quality risks
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.