CSQA Exam Questions

Which of the following is one of the two major objectives for establishing a security baseline?

Which of the following is a level for maturing the Quality Assurance Processes?

The purpose of the ___________ is to define the work activities that will accomplish the business objectives.

It is very easy to distinguish between accidental loss and intentional loss, with respect to security activities.

Which of the following should be kept under version control?

COQ is also known as 'Price of Non-Conformance'.

Customer surveys are:

When making a judgment while compliance monitoring, experience plays a larger role when:

Which one of the following best describes "mission statement" for a company or an organization?

If a programmer follows a series of steps to write a computer program, the programmer is following:

When dealing with a complaint, to get on the same physical wavelength with a client you should:

Which one of the following is NOT a component of CMMi maturity levels?

If your IT organization adopted function points as the means to measure program size, this would enable you to estimate programming staff because you would know a program of 200 fu...

Unit testing, system testing and user acceptance testing are examples of:

The core activity of Process Definition is not only defining the process but also:

In statistics, the mean and median are called:

One of the attributes of an effective security control is dividing responsibility for any event among two or more people. This security attribute is called:

Which of the following statements completely interprets the 'Act' phase of PDCA cycle?

Management tools:

Tracking the status of each requirement throughout the development and test phases is called:

Acceptance Testing is normally designed and performed by:

In control charts, accepted practice uses a width of _________________________around the populations mean (?) to establish the control limits.

The acronym CMM stands for:

Out of the three critical aspects of Toyota's JIT concept, which one is the most important?

Security passwords should be changed:

Which of the following is considered a metric?

_____________ is a process that transfers decision making from management to employees.

Capability Maturity Model(s) (CMMs) are defined and managed by:

While unit testing should be done, it is not necessary to spend the time and effort to develop and document the unit test plan and cases because it is conducted by the developers t...

The rules used to evaluate products and identify non-conformance are:

Organizations use many ways to determine the size of a program. Which of the following methods for measuring the size of a program can be used before the coding process is complete...

The loss associated with risks can be calculated as follows:

The Quality Manager is in the business of selling quality.

Quality Control practices should be performed during which of the following product phases?

__________ are used to determine whether the standards have been adhered to or not.

Conducting software inspections would be considered which of the following cost-of-quality categories?

Example of a test activity to be performed during Maintenance Phase is:

You have observed a high failure rate in production due to defects in the computer programs. If you follow good quality practices, the approach you would take to reduce the inciden...

Which of the following is NOT included in the system specifications used to evaluate the feasibility of an outside organization to develop the software?

Which of the following is the most difficult component of the decision making process?

Matrix diagrams can be used for the following, except for:

The first step in the Complaint-Resolution Process is:

A review that uses subject matter experts to ensure that critical success factors are being adequately addressed is a:

ISO / IEC 15504: Process Assessment is formerly known as:

Transaction Flow is used as a basis to:

It is generally recognized that software testing should begin at which software development phase?

Which of the following types of testing is considered Dynamic Testing?

When management selects an approach or set of actions to align assessed risks with the organization's risk appetite in the context of strategy and objectives, this is called:

If you acquired COTS software and were attending a demonstration of that software, what aspects of that software would you want to observe during the demonstration?

Which of the following quality control processes is used by an organization at a high quality control maturity level?