In MDC3, what is risk-based testing?

• A. Prioritizes test effort on high-risk areas to maximize defect detection per risk.
• B. Tests all components equally to maximize test coverage.
• C. Relies solely on automated test generation.
• D. Ignores risk in planning testing.

Answer: (A)

Risk-based testing focuses testing effort on the parts of the system with the greatest risk, using estimates of how likely a risky area is to contain defects and how severe the consequences would be if a defect exists. In MDC3, this means allocating more tests, more design effort, and more exploratory testing to high-risk areas, while spending less on low-risk areas, with the goal of maximizing defect detection relative to risk exposure. Implementing it involves identifying risks, assessing their probability and impact, ranking items, and tailoring test techniques to address those risks. This approach contrasts with testing everything equally, which spreads effort thin; relying solely on automated test generation, which may miss important risks and human insight; and ignoring risk entirely, which would waste resources and miss the point of prioritization.