TestForge

Chapter 3 — Static testing

Reviews, the review process, and what static analysis catches that execution can't.

18 minFoundation Level Exam Prep

What this chapter costs

Chapter 3 supplies 4 of the 40 questions in our practice paper — the second smallest chapter — across 8 objectives, all K1 or K2.

SectionObjectivesWhat it wants
3.1 Static testing basics3What can be examined, its value, static versus dynamic
3.2 Feedback and the review process5Early feedback, the activities, the roles, the types, success factors

Small chapter, high density: §3.2's five objectives are mostly lists you either know or do not, which makes this the cheapest chapter per hour of revision in the whole syllabus. The two things that reliably cost marks are who leads which review type and what static testing finds that dynamic testing cannot.

3.1 Static testing basics

Static testing does not execute the software. It has two forms: reviews of work products by people, and static analysis by tools, which examines code and other artefacts without running them.

What can be examined statically? Very nearly anything readable: requirements and specifications, source code, designs and models, test plans, test cases and test charters, product backlog items, contracts, and user documentation. The practical limit is the one to remember — it must be documented. Knowledge that lives only in someone's head cannot be reviewed.

Why it is worth doing. Four arguments, and the second is the examinable one:

  1. It finds defects early, when they are cheapest to fix — chapter 1's third principle applied.
  2. It finds defects that dynamic testing cannot find at all: unreachable or dead code, and — far more importantly — defects in the test basis itself. Ambiguity, inconsistency, omission, duplication and untestable requirements are invisible to execution, because there is nothing to execute.
  3. It builds shared understanding and consensus between participants.
  4. It improves maintainability and consistency of the product.

That second point is the chapter's centre of gravity: a requirement that contradicts itself will pass every test you can write against it, because the tests inherit the contradiction.

Static versus dynamic, and the distinction the exam wants precisely:

Static testingDynamic testing
Software runs?NoYes
FindsDefects, directlyFailures, from which defects are found
Can startAs soon as a draft existsOnce something executable exists
Also assessesMaintainability, consistency, testabilityBehaviour under conditions

Both aim at improving quality and both find defects — that shared purpose is why questions can make the two sound interchangeable. The separator is that dynamic testing observes a failure and infers a defect, while a review reads the defect off the page.

3.2 Feedback and the review process

Why early and frequent stakeholder feedback. It surfaces risks early, prevents misunderstandings about requirements, and lets the team build what the customer actually needs rather than discovering the gap at acceptance. The alternative is expensive rework, and the syllabus frames it exactly that way.

The review process has five activities, and they are examinable in order:

ActivityWhat happens
PlanningDefine scope, objectives, type, roles, entry and exit criteria
Review initiationGive participants the work product and everything they need
Individual reviewEach reviewer examines it alone and notes possible defects
Communication and analysisDiscuss, decide what is really a defect, agree what to do
Fixing and reportingThe author fixes; defects are reported and status tracked

Note that individual review comes before the meeting, and that a large part of a review's value is realised there. That is also why "participants had time to prepare" is one of the success factors.

The roles, and their responsibilities:

RoleResponsibility
ManagerDecides what is reviewed, allocates time and resources
AuthorWrote the work product; fixes the defects found
Moderator / facilitatorRuns the meeting, keeps it effective and safe
Scribe / recorderRecords the defects found and the decisions taken
ReviewerExamines the work product and reports possible defects
Review leaderTakes overall responsibility, decides who takes part, schedules it

One person may hold more than one role — the same rule chapter 1 gave for test management and testing roles.

The four review types, in increasing formality. This table is where the chapter's marks are:

TypeLed byCharacteristics
Informal reviewNo formal processNo documented output required; cheap, common, useful
WalkthroughThe authorAuthor leads the group through it; scenario-based; may include preparation
Technical reviewA trained moderator (not the author)Technically qualified peers; aims at consensus and technical decisions
InspectionA trained moderator (not the author)Most formal: defined roles, entry and exit criteria, metrics collected, process improvement

The exam question here is almost always "who leads it". The walkthrough is the one led by its author; the technical review and the inspection are deliberately not, because the author is the person least able to see their own omissions.

What makes a review succeed — a K1 list, and the items that get tested are the human ones:

  • clear, agreed objectives, and the right review type for those objectives, the people, and the situation
  • work products reviewed in small chunks, so attention holds
  • participants given adequate time to prepare
  • feedback given constructively — defects raised about the work product, not about the author
  • management supports it, and it is part of the organisation's culture
  • participants are trained, and meetings are well led

A review culture dies from feedback that reads as personal criticism, and the syllabus says so; a question offering "defects are attributed to the responsible individual" as a success factor is offering a failure factor.

The distinctions that decide marks

Confused pairThe line between them
Static / dynamicFinds defects directly / observes failures and infers defects
Walkthrough / inspectionLed by the author / led by a trained moderator, most formal
Technical review / inspectionConsensus and technical decisions / formal, metrics, entry-exit criteria
Review / static analysisPeople reading a work product / tools examining it unexecuted
Individual review / the meetingPreparation, where much of the value is / discussion and decisions
Author's roleFixes defects; never leads a technical review or inspection
Constructive feedback / attributionA success factor / the thing that kills the practice

Drill it

Chapter 3 quiz →

Eight questions, untimed, every answer explained. This chapter rewards a second pass more than any other — the lists are short, and the questions are drawn almost directly from them.

Next: Chapter 4 — test analysis and design, the largest chapter in the syllabus and the first with K3 objectives, where you have to apply a technique rather than recognise one.

Check your understanding

3 questions. No account needed, nothing is sent anywhere but the grader.

  1. 1. Which review type is led by the author of the work product?

  2. 2. What can static testing find that dynamic testing cannot?

  3. 3. Which of these are success factors for reviews as the syllabus presents them?(choose all that apply)

Answer every question first.

ISTQB® is a registered trademark of the International Software Testing Qualifications Board. TestForge QA Academy is not affiliated with, endorsed by, or accredited by the ISTQB or any of its member boards. Practice questions are written from the published syllabus learning objectives and are not reproduced from any real examination.