CTFL_Syll_4.0 Exam Dumps : ISTQB Certified Tester Foundation Level (CTFL) v4.0

This answer is correct because product risks are risks that affect the quality of the software product, such as defects, failures, or non-compliance with requirements or standards. Project risks are risks that affect the project’s schedule, budget, resources, or scope, such as delays, cost overruns, skill gaps, or scope changes. In this case, [I] and [IV] are product risks, as they relate to the accessibility and security of the software product, which are quality attributes. [II] and [III] are project risks, as they relate to the delivery time and the test automation skills of the test team, which are project factors. References: ISTQB Glossary of Testing Terms v4.0, ISTQB Foundation Level Syllabus v4.0, Section 2.1.1.1

Confirmation testing is performed after a defect is fixed, and if such testing is successful then the regression tests that are relevant for such fix can be executed. Confirmation testing, also known as re-testing, is the process of verifying that a defect has been resolved by running the test case that originally detected the defect. Confirmation testing is usually done before regression testing, which is the process of verifying that no new defects have been introduced in the software as a result of changes or fixes. Therefore, option D is the correct answer.

Exploratory testing is an experience-based testing technique where test design and test execution occur simultaneously. It is characterized by the tester actively exploring the application, using their intuition and experience to uncover defects. Exploratory testing sessions are often guided by test charters, which are brief documents outlining the test objectives, scope, and areas to be explored during the session.

These test charters provide a flexible framework that directs the tester's exploration without being overly prescriptive, allowing testers to adapt and investigate new areas as they uncover issues. This approach is particularly useful in dynamic and complex systems where predefined test cases might not cover all scenarios.