ISTQB Technical Test Analyst Static Analysis Quiz

1. What does 'false positive' mean in the context of static analysis?

A tool reports a defect that does not actually exist

A defect that appears only under specific conditions

A defect found during dynamic testing

A defect that affects multiple modules

2. What role does static analysis play in compliance and regulatory requirements?

It helps ensure code meets security and quality standards

It replaces all regulatory testing

It has no impact on compliance

It only applies to financial software

3. Static analysis tools are most effective at identifying which category of defects?

Structural and coding standard violations

User experience issues

Business logic errors in all scenarios

Hardware compatibility problems

4. Which code characteristic typically increases the difficulty of static analysis?

High cyclomatic complexity and multiple decision paths

Short function names

Extensive code comments

Consistent indentation

5. In static analysis, which of the following is a limitation?

It cannot detect runtime errors or performance issues

It is more expensive than dynamic testing

It always finds all security vulnerabilities

It requires no technical expertise

6. A technical test analyst discovers that a static analysis tool produces many false positives. What is the best approach?

Configure the tool's rules and thresholds to match project standards

Abandon static analysis entirely

Ignore all tool warnings

Rely only on manual code review

7. Which of the following best describes 'data flow analysis' in static analysis?

Tracing how data moves through the program

Measuring database transaction speed

Analyzing network packet transmission

Monitoring real-time user interactions

8. What is a key advantage of integrating static analysis into the CI/CD pipeline?

Defects are detected early in development

It eliminates the need for manual testing

It guarantees zero defects in production

It reduces the need for code documentation

9. Static analysis can help detect which of the following security issues?

SQL injection vulnerabilities and buffer overflows

Only runtime permission errors

Only user authentication failures

Only network connectivity problems

10. Which metric measures the number of independent paths through a code module?

Cyclomatic complexity

Lines of code (LOC)

Code coverage percentage

Defect density

11. Which of the following is a primary benefit of static analysis in software development?

Detecting defects before code execution

Improving runtime performance

Replacing dynamic testing entirely

Automating all testing activities

12. Which of the following is an example of a static analysis tool?

SonarQube

JMeter

Selenium

LoadRunner

13. In ISTQB terminology, static analysis is classified as part of which testing type?

Static testing

Dynamic testing

Regression testing

Performance testing

14. Which programming language aspect is most frequently analyzed by static analysis tools?

Control flow and data flow patterns

User interface colors

Database schema design

Network protocols

15. What is the primary objective of code review in static analysis?

To identify defects and improve code quality before execution

To replace all automated testing

To increase development speed

To eliminate the need for documentation

16. Which of the following is NOT a typical feature of static analysis tools?

Measuring application performance under load

Detecting code style violations

Identifying potential null pointer exceptions

Finding unused variables

17. In static analysis, what does 'code smell' refer to?

A surface-level indicator of deeper design problems

An error that causes the program to crash

A security vulnerability in the codebase

A performance bottleneck in execution

18. Which metric is commonly used to measure code quality in static analysis?

Cyclomatic complexity

User satisfaction score

Server uptime percentage

Page load time

19. What is the primary difference between whitebox and blackbox testing in the context of static analysis?

Whitebox testing examines source code; blackbox testing does not

Blackbox testing is more thorough

Whitebox testing requires no tools

Blackbox testing only applies to web applications

20. Static analysis tools typically focus on identifying which type of issues?

Security vulnerabilities, code style, and logic errors

User interface design flaws

Database performance problems

Network latency issues