Question 700
A software testing team encounters the following project situation: An ATM team specifies 'if PIN invalid then reject' but never specifies what happens after three consecutive failures, leaving an account-lockout security gap. Which repeatable testing practice most directly reduces recurrence of this problem?
Explanation
Correct Answer
This safeguard specifically targets the contributing cause: Include repeated-event and state-change examples in acceptance planning. It addresses the principle (Examples and criteria help uncover state-dependent behavior missing from simple rules.) and can be assessed by: Three failures lock the account as agreed, while a permitted reset follows the authorized recovery path.
Incorrect Answers
This preventive step mitigates a different project risk (syllabus section 4.5): An e-commerce story has one acceptance sentence, 'the discount works', and the tester cannot determine which customer segments qualify. The targeted safeguard for the current case is: Include repeated-event and state-change examples in acceptance planning.
This preventive step mitigates a different project risk (syllabus section 4.5): A flight booking story says refunds must complete within seven days, but a test expects exactly seven days instead of verifying the maximum permitted time. The targeted safeguard for the current case is: Include repeated-event and state-change examples in acceptance planning.
This preventive step mitigates a different project risk (syllabus section 4.2): A travel claim uses conditions 'flight cancelled' and 'replacement provided', with compensation depending on their combination; the tester groups all cancellation cases into one partition. The targeted safeguard for the current case is: Include repeated-event and state-change examples in acceptance planning.