You Can Count on Well-Written Requirements, but You Can't Count

Multiple Choice

You can count on well-written requirements, but you can't count on an adequate contribution of the stakeholders to the quality risk analysis. You have to mitigate the insufficient contribution of the stakeholders because the risk-based testing approach shall minimize the product risks. Your test team has one expert tester in security testing. Which of the following test activities would you expect to be the less important in this context?

A) Extract from the defect tracking system of the previous project all the security defects and failures, and classify them to support design and execution of specific tests.
B) Automate all functional and non-functional system tests.
C) Apply systematic and exploratory testing for integration and system test.
D) Perform exploratory testing sessions with adequate charters covering security aspects.