ISO/IEC 29148:2018 - Requirements Engineering Foundation Free Practice Test — 30 Questions

Question 1

Consider a complex software development project for a financial institution aiming to comply with evolving data privacy regulations, such as GDPR or CCPA. The project team has adopted a requirements engineering process aligned with ISO/IEC 29148:2018. During the initial elicitation phase, a significant portion of the end-user representatives were unavailable due to a critical operational crisis within their departments. Consequently, requirements related to data anonymization and user consent management were primarily documented based on assumptions derived from a small, unrepresentative sample of users and existing, potentially outdated, documentation. What is the most likely consequence of this limited stakeholder engagement on the project\'s ability to deliver compliant and effective requirements according to the principles of ISO/IEC 29148:2018?

Accepted Answer

A higher probability of incomplete or inaccurate requirements, leading to potential non-compliance with data privacy regulations and increased risk of rework during validation and implementation.

Question 2

A development team is tasked with creating a next-generation digital banking application. To thoroughly understand the user experience and identify unmet needs, they decide to spend several days observing individuals in their daily routines, noting how they currently manage their finances, interact with existing banking services (both digital and physical), and the challenges they face. This observation is conducted without direct questioning or intervention, aiming to capture authentic behaviors and environmental influences. Which primary requirements elicitation technique, as broadly categorized in standards like ISO/IEC 29148:2018, is being employed in this scenario?

Accepted Answer

Observation

Question 3

A multinational corporation is developing a new global financial reporting system. During the initial requirements elicitation, a critical business objective was defined: \"Ensure compliance with all relevant international financial regulations, including GDPR and SOX, by Q4 of the fiscal year.\" Subsequently, numerous functional and non-functional requirements were derived, leading to detailed system design specifications and the creation of a comprehensive test suite. The project manager is now anticipating a potential change to the scope of \"international financial regulations\" due to evolving legislative landscapes. To proactively manage the impact of this anticipated change, what type of traceability is most critical for the team to ensure is robustly established and maintained across all requirement artifacts, design documents, and test cases?

Accepted Answer

Bidirectional traceability

Question 4

A team is developing a new air traffic control system. During an initial stakeholder workshop, a set of functional requirements for flight path management and communication protocols were documented. Following the development of a prototype, usability testing with experienced air traffic controllers indicated that while the system performed the required functions, the interface made it cumbersome to quickly access and input critical flight data during high-stress situations. This feedback highlights a gap between the documented functional requirements and the practical operational needs. Which action best reflects the principles of ISO/IEC 29148:2018 for addressing such a discrepancy?

Accepted Answer

Update the existing functional requirements to incorporate specific usability criteria and potentially introduce new non-functional requirements addressing user interface efficiency and data access speed.

Question 5

Consider a complex aerospace software system where stringent regulatory compliance, such as adherence to DO-178C guidelines, is paramount. During the requirements engineering phase, the development team is tasked with ensuring that every functional requirement is demonstrably linked to an identified stakeholder need and subsequently to specific design elements, code modules, and verification test cases. Which fundamental principle, as outlined in ISO/IEC 29148:2018, is most critical for achieving this level of verifiable linkage and ensuring compliance throughout the system\'s lifecycle?

Accepted Answer

Establishing and maintaining bidirectional traceability between requirements and related artifacts.

Question 6

A multinational corporation is initiating the development of a new enterprise resource planning (ERP) system intended to streamline global operations and ensure compliance with diverse international data privacy regulations, such as the GDPR and CCPA. The project team comprises representatives from finance, human resources, logistics, and legal departments, each with distinct operational priorities and interpretations of data handling protocols. Furthermore, end-users span multiple continents and possess varying degrees of technical proficiency. Which combination of requirements elicitation techniques would most effectively address the complexity of this project, ensuring comprehensive capture of functional, non-functional, and regulatory requirements?

Accepted Answer

Conduct structured interviews with key legal and compliance officers, facilitate cross-departmental workshops to define core business processes, and perform document analysis of existing regulatory mandates and internal policies.

Question 7

Consider a scenario where a critical software upgrade for an air traffic control system is mandated by new international aviation regulations, such as those introduced by the International Civil Aviation Organization (ICAO) concerning data link communications. However, due to the highly sensitive nature of air traffic operations and the limited availability of active controllers for extensive interviews or observation periods, the project team must devise an elicitation strategy. Which of the following approaches would be most aligned with the principles of ISO/IEC 29148:2018 for gathering requirements under such stringent constraints?

Accepted Answer

Analyzing existing operational manuals, incident reports, regulatory compliance documents, and conducting structured interviews with experienced former air traffic controllers and system engineers familiar with the legacy system.

Question 8

During the development of a novel autonomous maritime navigation system, the engineering team identifies a critical discrepancy. The functional requirements specify that the vessel must maintain a minimum safe distance of 500 meters from all other vessels at all times. However, a non-functional requirement mandates that during specific low-visibility docking procedures, the system must be able to maneuver within 10 meters of port infrastructure to optimize berthing space. This internal contradiction within the documented requirements presents a significant challenge. Which fundamental quality attribute of requirements, as emphasized by ISO/IEC 29148:2018, is most directly compromised by this situation, and what primary activity is needed to resolve it?

Accepted Answer

Consistency; Verification

Question 9

A multinational e-commerce platform is developing a new feature to personalize user recommendations based on their browsing history and purchase patterns. The development team has documented a requirement: \"The system shall collect and analyze all user browsing data and purchase history to generate personalized recommendations.\" Given the stringent data privacy regulations like the GDPR, which validation activity is of paramount importance for this specific requirement to ensure compliance and ethical data handling?

Accepted Answer

Verifying that the collected data is sufficient to generate accurate and relevant recommendations.

Question 10

Consider a global software development initiative aiming to create a new collaborative platform for scientific research. The project team comprises individuals from various continents, and the primary stakeholders are researchers spread across numerous institutions worldwide. Direct, in-person meetings are impractical due to logistical complexities and time zone differences. Which elicitation technique, when implemented with careful design and validation, would most effectively capture the diverse and potentially conflicting needs of this widely distributed stakeholder group?

Accepted Answer

Online surveys with carefully crafted, multi-format questions and branching logic

Question 11

Consider a financial services firm developing a new online banking platform. Among the documented requirements for this platform, one states that the system must \"accurately calculate interest on savings accounts based on the prevailing daily rate and the account balance.\" Another requirement specifies that \"all customer data must be encrypted using AES-256 encryption standards.\" A third requirement mandates that \"the system must respond to user login requests within 2 seconds under normal load conditions.\" Which of the following requirements is an example of a functional requirement as defined by ISO/IEC 29148:2018?

Accepted Answer

The system must accurately calculate interest on savings accounts based on the prevailing daily rate and the account balance.

Question 12

During the initial phase of developing a new regulatory compliance system for a financial institution, a requirements engineering team is conducting workshops with compliance officers, IT security personnel, and end-users. These sessions involve open-ended discussions, brainstorming potential features, and exploring how current manual processes might be automated. The team is not yet formalizing documented requirements but is focused on understanding the underlying business needs, identifying potential gaps in existing knowledge, and discovering unstated expectations. Which primary requirements engineering activity, as outlined by ISO/IEC 29148:2018, best characterizes this phase?

Accepted Answer

Elicitation

Question 13

A complex aerospace control system is undergoing development, and during the validation phase, a critical regulatory body mandates a significant alteration to the system\'s data logging capabilities to comply with new international aviation safety directives. This directive, issued just prior to the planned system deployment, necessitates a substantial revision to how flight telemetry data is captured, stored, and accessed. The development team must quickly assess the impact of this change on the existing architecture, testing procedures, and deployment timeline, while also ensuring that all previously validated functionalities remain intact and that the new requirements are fully traceable. Which fundamental requirements engineering principle, as advocated by ISO/IEC 29148:2018, is most critical for successfully navigating this scenario?

Accepted Answer

Establishing and maintaining a comprehensive requirements traceability matrix to link the new regulatory mandate to specific system components and test cases.

Question 14

Consider a scenario where a technology firm is developing a novel augmented reality application for a completely new type of recreational activity. The target audience has no prior experience with similar applications, and their specific needs and desired functionalities are largely unknown and difficult to articulate upfront. The development team needs to discover these requirements in a way that fosters innovation and addresses potential user behaviors that may not be immediately obvious. Which combination of elicitation techniques would be most effective in this exploratory phase, adhering to the principles outlined in ISO/IEC 29148:2018 for foundational requirements engineering?

Accepted Answer

User observation and prototyping

Question 15

A multinational e-commerce platform is developing a new customer relationship management (CRM) system. This system will process significant amounts of personal data from users across various jurisdictions, including those subject to the General Data Protection Regulation (GDPR). Considering the principles outlined in ISO/IEC 29148:2018 for effective requirements engineering, which approach best ensures that the CRM system\'s requirements adequately address the stringent data privacy mandates of GDPR from the initial stages of development?

Accepted Answer

Treat GDPR compliance as a set of non-functional requirements that are documented and verified during the later stages of system testing.

Question 16

Consider a project developing a new financial analytics platform for a global investment firm. The requirements engineering team has documented several system requirements. Which of the following requirements, as stated, would be most challenging to verify according to the principles outlined in ISO/IEC 29148:2018?

Accepted Answer

The system shall display the closing stock price for any NASDAQ-listed security within 500 milliseconds of the data feed update.

Question 17

A development team is tasked with building a new financial transaction system. During the detailed design phase, a recently enacted data privacy law, the \"Global Data Protection Act\" (GDPA), comes into effect, imposing stringent new rules on how customer financial information can be stored and processed. The initial requirements were gathered through extensive stakeholder workshops and documented according to ISO/IEC 29148:2018 guidelines. How should the team proceed to ensure the system\'s compliance and continued alignment with stakeholder needs, considering the iterative nature of requirements engineering?

Accepted Answer

Conduct a thorough impact analysis of the GDPA on the existing requirements baseline, revise affected requirements, and re-validate the updated set with stakeholders.

Question 18

A team is developing a next-generation air traffic control system, adhering to ISO/IEC 29148:2018 principles. Initial elicitation produced a comprehensive set of functional requirements for flight path management and communication protocols. During a preliminary validation session with experienced air traffic controllers, feedback indicated that while the system\'s functions were technically sound, the proposed user interface design, based on the initial requirements, could significantly increase cognitive load during peak operational periods, potentially leading to errors. Which of the following actions best exemplifies the iterative refinement process advocated by ISO/IEC 29148:2018 in response to this validation finding?

Accepted Answer

Immediately proceed with the design and implementation of the system as per the validated functional requirements, documenting the cognitive load concern as a post-deployment enhancement.

Question 19

During the development of a complex air traffic control system, a discrepancy emerges between the stated operational need for real-time flight path updates and a documented security policy that mandates a minimum data processing latency of 50 milliseconds to ensure cryptographic integrity. This situation presents a direct conflict between functional performance and a non-functional security constraint. What is the most appropriate initial step in addressing this identified conflict according to the principles outlined in ISO/IEC 29148:2018 for managing requirements?

Accepted Answer

Establish a formal process for conflict identification and resolution, involving relevant stakeholders to negotiate a mutually acceptable compromise or re-prioritization.

Question 20

Consider a project developing a new educational software platform for young learners. The stakeholders have expressed a strong desire for the platform to be \"engaging and foster a love for learning.\" Which of the following types of requirements, as typically addressed in ISO/IEC 29148:2018, presents the most significant challenge for objective verification?

Accepted Answer

Requirements specifying the platform's ability to adapt the difficulty of exercises based on a learner's performance.

Question 21

Consider a scenario where a development team is tasked with building a new online banking platform. One of the documented requirements states that the system must \"process financial transactions accurately and securely.\" Which category of requirement does this statement primarily fall under, according to the principles outlined in ISO/IEC 29148:2018?

Accepted Answer

Non-functional requirement

Question 22

A software development team is building a critical financial transaction system. Midway through development, a new national cybersecurity directive is enacted, mandating stricter data encryption protocols and real-time anomaly detection for all financial data processing. This directive has significant implications for the system\'s architecture, data storage, and user authentication mechanisms. Which of the following approaches best aligns with the principles of robust requirements engineering, as advocated by ISO/IEC 29148:2018, for integrating this new directive into the ongoing project?

Accepted Answer

Conduct a comprehensive impact analysis of the new directive on all existing requirements, identify necessary modifications and additions, and manage these changes through a formal change control process, including re-validation and traceability updates.

Question 23

Considering the principles outlined in ISO/IEC 29148:2018 for effective requirements engineering, which combination of elicitation techniques would generally be considered most robust for establishing a comprehensive understanding of user needs and system context in a project with geographically dispersed stakeholders and a novel technological domain, where initial requirements are likely to be vague and subject to significant evolution?

Accepted Answer

A phased approach combining structured interviews with key subject matter experts, followed by facilitated online workshops with broader stakeholder groups, and supplemented by analysis of analogous system documentation.

Question 24

Consider a system designed for an e-commerce platform. Which of the following statements most precisely articulates a functional requirement as defined by ISO/IEC 29148:2018, distinguishing it from other types of requirements?

Accepted Answer

The system shall process customer orders by validating inventory levels and initiating shipping procedures.

Question 25

Consider a scenario where a multinational consortium is developing a next-generation air traffic control system, necessitating the integration of requirements from aviation authorities, airline operators, and air traffic controller unions across several continents. Which approach best addresses the inherent complexity and potential for conflicting stakeholder needs during the requirements elicitation phase, aligning with the principles of ISO/IEC 29148:2018?

Accepted Answer

Employing a multi-faceted elicitation strategy that combines structured interviews with key representatives, facilitated workshops for cross-stakeholder consensus building, and iterative prototyping to visualize and validate proposed functionalities, while meticulously documenting all identified conflicts and their resolutions.

Question 26

A development team is tasked with building a new online banking platform. During the requirements elicitation phase, stakeholders emphasize that the system must comply with the General Data Protection Regulation (GDPR) regarding the handling of personal financial information. A specific requirement stated is that all personally identifiable financial data must be encrypted using a government-approved algorithm before being written to any persistent storage. Which category of requirement does this specific stipulation most accurately fall under according to the principles outlined in ISO/IEC 29148:2018?

Accepted Answer

Non-functional requirement

Question 27

Consider a scenario where a team is developing a new financial transaction processing system. They have documented several potential requirements. Which of the following requirements, if implemented, would be the most challenging to objectively verify according to the principles of robust requirements engineering as defined in ISO/IEC 29148:2018?

Accepted Answer

The system shall process all approved transactions within $500$ milliseconds under peak load conditions.

Question 28

A multinational corporation is developing a new cloud-based financial services platform intended for use across several jurisdictions, including those with stringent data privacy laws like the General Data Protection Regulation (GDPR). The project team is in the early stages of requirements engineering. Which approach best ensures that the platform\'s design and functionality inherently adhere to these complex, evolving legal and regulatory frameworks from the outset?

Accepted Answer

Treat all regulatory mandates as non-functional requirements, meticulously documented and traced to specific clauses within the relevant legislation.

Question 29

An organization\'s software system, developed several years ago, is now subject to a new national data protection act that mandates stricter consent mechanisms for user data collection. The project manager needs to assess the impact of this legislation on the existing requirements. Which systematic approach, aligned with ISO/IEC 29148:2018 principles, would be most effective in managing this change?

Accepted Answer

Trace existing requirements to identify those related to data collection and consent, analyze the necessary modifications to comply with the new act, validate these changes with legal and business stakeholders, and update the requirements baseline and associated artifacts.

Question 30

A development team is crafting requirements for a new air traffic control system. One critical non-functional requirement specifies that the system must maintain a minimum of 99.999% availability during operational hours, as mandated by aviation safety regulations. Which validation technique, as broadly supported by the principles in ISO/IEC 29148:2018, would be most appropriate for confirming that this stringent availability requirement has been met in the deployed system?

Accepted Answer

Empirical testing through rigorous stress and endurance testing under simulated operational loads.

ISO/IEC 29148:2018 - Requirements Engineering Foundation Free Practice Test — 30 Questions

A lot more is already mapped out

About the ISO/IEC 29148:2018 - Requirements Engineering Foundation Certification