CSQE Practice Questions

When the requirements group does not control changes to software specifications, a basic

requirement is to assign explicit responsibility for software configuration management (SCM) for

each project. Here's why:

Clear Accountability: Assigning explicit responsibility ensures that someone is accountable for

managing and controlling changes.

Consistency in Process: This ensures consistent application of SCM practices across different projects.

Improved Control: Clear responsibility helps in better monitoring and controlling changes, reducing

the risk of unauthorized or untracked changes.

Policy Enforcement: Facilitates the enforcement of SCM policies and procedures, ensuring

compliance and integrity of the project.

Reference:

"Software Configuration Management Patterns: Effective Teamwork, Practical Integration" by

Stephen P. Berczuk and Brad Appleton.

"Software Configuration Management Strategies and Rational ClearCase: A Practical Introduction" by

Brian A. White.

Outsourcing is a business practice where a company hires an external organization to perform tasks,

handle operations, or provide services. One key advantage of outsourcing is that it allows the

primary company to focus its resources on its core competencies. By delegating non-core activities to

external specialists, the company can concentrate on what it does best, thereby enhancing efficiency,

innovation, and competitive advantage in its primary market.

Reference:

"The Outsourcing Revolution" by Michael F. Corbett

IEEE Software Engineering Body of Knowledge (SWEBOK), Chapter on Software Engineering

Management

Testing a software upgrade is classified under the appraisal category of the Cost of Quality. Appraisal

costs are associated with evaluating and measuring the quality of products through testing and

inspection to ensure they meet quality standards and specifications.

Reference: ISO 9001:2015 quality management principles and ASQ (American Society for Quality)

definitions of Cost of Quality, which categorize testing activities as appraisal costs.

The lead auditor acts as the final arbitrator for any audit-related issues that cannot be handled at a

lower level. This individual is responsible for the overall conduct of the audit, ensuring that the audit

is performed according to the plan and that all findings are appropriately addressed and resolved.

The lead auditor has the authority to make final decisions on disputes or issues that arise during the

audit process, ensuring objectivity and adherence to audit standards.

Reference:

ISO 19011: Guidelines for Auditing Management Systems

"Internal Auditing: Assurance & Advisory Services" by Urton

L. Anderson, Michael

J. Head, et al.

Setting Goals: Before data can be effectively collected and utilized, it’s essential to have clear goals.

This ensures that the data collection process is aligned with the organization's objectives.

Importance of Goals: Establishing the data collection goal ensures that the team collects relevant

and meaningful data, which can be analyzed to improve processes and products.

Sequential Process: After setting goals, the team can then determine what specific data to collect,

how to collect it, and which metrics to report. This ensures a systematic approach to metrics program

development.

The feature rating system described (1 = Completely dissatisfied, 2 = Somewhat dissatisfied, 3 =

Neither satisfied nor dissatisfied, 4 = Somewhat satisfied, 5 = Completely satisfied) is based on an

ordinal measurement scale. Ordinal scales categorize data into distinct groups that have a

meaningful order or ranking, but the intervals between the ranks are not necessarily equal. In this

case, the ratings provide a rank order of satisfaction levels.

For secure data handling due to export control regulations, running on the client's virtual machines

without connecting through an enterprise VPN, the combination of a private cloud and infrastructure

as a service (IaaS) is suitable. This setup allows the client to have dedicated infrastructure and control

over their data environment, ensuring compliance with security and regulatory requirements.

Reference: NIST SP 800-145, which provides guidelines on cloud computing and defines private cloud

and IaaS models for enhanced security and control.

Internal failure costs are costs associated with defects found before the product reaches the

customer. These costs include:

Investigation of defects: Identifying and analyzing defects within the development process.

Rework: Fixing defects found during internal testing or audits.

Scrap: Discarding defective parts or products.

Downtime: Halting production or development to address defects.

Among the given options, investigating the cause of build defects is an internal failure cost because it

pertains to finding and analyzing issues within the software before it is released to customers.

Reference:

"Quality Planning and Analysis" by J.M. Juran and F.M. Gryna

"Total Quality Management" by Besterfield et al.

Static analysis tools are used to evaluate documentation and source code. These tools analyze the

code without executing it, looking for potential errors, coding standard violations, security

vulnerabilities, and other issues.

By reviewing the source code and associated documentation, static analysis helps in identifying

problems early in the development process, improving code quality and reducing the likelihood of

defects in the final product.

Reference:

"Code Complete: A Practical Handbook of Software Construction" by Steve McConnell

"Static Analysis: Results from the Static Analysis Tool Exposition (SATE) IV" by Paul E. Black, Elizabeth

Fong, et al.

Performance tests are essential for ensuring that a new client-server development environment can

handle the expected load and perform adequately with 2 to 25 users. These tests help evaluate how

the system performs under various conditions, such as peak load times and typical usage scenarios,

ensuring that it meets the company's performance requirements. By running performance tests, you

can identify potential bottlenecks, optimize resource usage, and ensure that the system can scale

effectively.