I85PREP
⌘ K
ISTQB CT-AuT study materials
ISTQB CT-AuT study resources

ISTQB CT-AuT practice questions

One question at a time. Build your ISTQB CT-AuT understanding.

First 50 of 199 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In Automotive SPICE®, which process dimension covers the verification of work products against their specified requirements within a project?

  1. MAN.3 Project Management
  2. ACQ.4 Supplier Monitoring
  3. SWE.4 Software Unit Verification Correct answer.
  4. SUP.1 Quality Assurance

Explanation

SWE.4 Software Unit Verification is the process that requires verification of software units against detailed design and unit requirements, producing evidence of conformity. SUP.1 addresses process and work product quality assurance across the project, not unit-level verification.

Question 2Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which Automotive SPICE® capability level is reached when a process is performed and managed, with performance monitored and adjustments made, but no defined process yet exists?

  1. Capability level 1
  2. Capability level 0
  3. Capability level 2 Correct answer.
  4. Capability level 3

Explanation

Capability level 2 (Managed) requires that the process delivers its outcomes and is planned, monitored and adjusted through a management infrastructure. Level 1 only requires the process to achieve its outcomes without that management discipline.

Question 3Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A test manager must show bidirectional traceability between software requirements and test cases for an Automotive SPICE® assessment. Which evidence best satisfies this expectation?

  1. A defect log grouped by severity
  2. A list of all test cases sorted by execution date
  3. A matrix linking each requirement to the test cases that verify it and back Correct answer.
  4. A coverage report showing only statement coverage of the code

Explanation

Bidirectional traceability requires a mapping from requirements to verification measures and from those measures back to requirements, which a traceability matrix provides. Coverage reports and defect lists document other aspects and do not establish the requirement-to-test link.

Question 4Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

According to ISO 26262, what is the purpose of an Automotive Safety Integrity Level (ASIL) determination?

  1. To assign a target failure rate to each hardware component
  2. To select the programming language for safety-related software
  3. To classify the risk of a hazardous event and derive the rigor of safety measures Correct answer.
  4. To define the communication matrix of the E/E architecture

Explanation

ASIL determination classifies hazardous events using severity, exposure and controllability, and the resulting level drives the rigor of required safety activities. It is not a per-component failure rate target nor an architecture or language decision.

Question 5Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In ISO 26262, which parameter combination leads to ASIL D for a hazardous event?

  1. Severity S1, Exposure E4, Controllability C3
  2. Severity S3, Exposure E2, Controllability C1
  3. Severity S3, Exposure E4, Controllability C3 Correct answer.
  4. Severity S2, Exposure E3, Controllability C2

Explanation

The ISO 26262 risk table assigns ASIL D only to the combination S3 with E4 and C3. Lower severity, exposure or controllability values reduce the resulting integrity level according to the table.

Question 6Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which ISO 26262 document specifies the safety mechanisms, safe states and fault tolerant time intervals allocated to a technical safety concept?

  1. Item definition
  2. Software architectural design
  3. Hazard analysis and risk assessment
  4. Technical safety concept Correct answer.

Explanation

The technical safety concept refines the functional safety concept into system-level technical requirements, including safety mechanisms, safe states and timing constraints. The item definition and hazard analysis precede it, and software architecture implements it at a lower level.

Question 7Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A safety goal requires the motor control function to enter a safe state within 20 ms of detecting a fault. Where should this timing requirement first be captured in the ISO 26262 workflow?

  1. In the functional safety concept as a safe state with its fault tolerant time interval Correct answer.
  2. In the item definition as an operating mode
  3. In the hardware qualification report as a component rating
  4. In the software unit test specification as a timing assertion

Explanation

The functional safety concept defines safe states and the timing within which they must be reached, derived from the fault tolerant time interval. Lower-level test specifications and hardware reports implement or verify this requirement rather than originate it.

Question 8Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which ISO 26262 confirmation measure is required for a safety element out of context (SEooC) that is developed without a specific item?

  1. A field monitoring campaign after start of production
  2. A full vehicle-level crash test
  3. Assumptions of use that must be validated by the integrator Correct answer.
  4. A production process audit by the vehicle manufacturer

Explanation

A SEooC is developed against assumed requirements, so the assumptions of use must be documented and validated when the element is integrated into a concrete item. Vehicle crash tests and field campaigns are unrelated to the SEooC development approach.

Question 9Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In ISO 26262-6, which test method is highly recommended at software unit level for ASIL D to detect errors in the control flow?

  1. Structural coverage analysis of statement and branch coverage Correct answer.
  2. Resource usage testing
  3. Back-to-back testing of models
  4. Requirements-based testing only

Explanation

ISO 26262-6 recommends structural coverage metrics such as statement and branch coverage at unit level, with high recommendation for higher ASILs, to reveal untested control flow. Requirements-based testing is also required but does not by itself measure structural coverage.

Question 10Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A team applies ISO 26262-6 unit test methods and must justify why boundary value analysis was not used for a safety-related function. What does the standard require?

  1. The method must be replaced by a random test approach
  2. The rationale for not applying a recommended method must be documented Correct answer.
  3. The ASIL must be lowered to allow omission
  4. The unit must be retested at system level instead

Explanation

ISO 26262 permits tailoring of recommended methods only with a documented rationale explaining why the method is not applicable or is substituted. Lowering the ASIL or shifting testing to another level is not an acceptable substitute for that justification.

Question 11Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which AUTOSAR® layer provides standardized services such as diagnostic communication, ECU state management and communication management to application software?

  1. Services Layer Correct answer.
  2. ECU Abstraction Layer
  3. Complex Device Driver
  4. Microcontroller Abstraction Layer

Explanation

The AUTOSAR Services Layer offers system services including diagnostics, ECU state management and communication management, plus the RTE. The abstraction layers and complex drivers sit closer to hardware and do not provide these standardized services.

Question 12Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In AUTOSAR®, what is the primary role of the Runtime Environment (RTE)?

  1. It stores calibration data in non-volatile memory
  2. It schedules the operating system tasks directly
  3. It compiles the application software into machine code
  4. It mediates communication between software components and between components and the BSW Correct answer.

Explanation

The RTE implements the communication infrastructure between software components and between components and the basic software, realizing the virtual function bus. Compilation, calibration storage and OS scheduling are handled by other tools or BSW modules.

Question 13Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A tester needs to verify that two AUTOSAR® software components exchange a sender-receiver signal with the specified data type and update timing. Which artifact defines this contract?

  1. The ECU extract of the system description
  2. The software component description including its ports and interfaces Correct answer.
  3. The diagnostic trouble code table
  4. The linker script of the ECU build

Explanation

Software component descriptions define ports, interfaces and communication attributes such as data type and timing, which the RTE uses to generate communication code. The ECU extract and linker script concern deployment, and the DTC table concerns diagnostics.

Question 14Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which AUTOSAR® mechanism allows a software component to be executed in a different context without changing its implementation, by mapping runnables to tasks?

  1. The watchdog manager supervision
  2. The runnable-to-task mapping in the ECU configuration Correct answer.
  3. The diagnostic session control service
  4. The non-volatile memory block configuration

Explanation

Runnables are mapped to OS tasks during ECU configuration, so the same component implementation can be deployed in different execution contexts. Diagnostic services, watchdog supervision and NvM configuration serve other purposes.

Question 15Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which test approach is typical for verifying an AUTOSAR® basic software module such as the COM stack in isolation from application software?

  1. System-level test on the target vehicle
  2. Field test with end customers
  3. Unit test with stubs of the lower layer and a test harness Correct answer.
  4. Hardware-in-the-loop test of the complete powertrain

Explanation

Isolated verification of a BSW module uses unit testing with stubs or mocks of adjacent layers and a harness to drive inputs and observe outputs. Vehicle, field and full powertrain tests exercise integrated systems rather than the module in isolation.

Question 16Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In a test environment for AUTOSAR®-based ECUs, what is the main purpose of a restbus simulation?

  1. To replace the real communication partners on the bus with simulated messages Correct answer.
  2. To validate the calibration data against the diagnostic specification
  3. To compile the application software for the target
  4. To measure the electromagnetic emissions of the ECU

Explanation

A restbus simulation emulates the missing network participants so the ECU under test receives realistic bus traffic during bench or HIL testing. Emission measurement, compilation and calibration validation are separate activities.

Question 17Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which tool interface standard is used to access measurement and calibration data of an ECU during testing on a bench?

  1. ASAM OpenDRIVE
  2. AUTOSAR ECU extract only
  3. ASAM MCD-2 MC (A2L) with XCP Correct answer.
  4. ISO 14229 only

Explanation

ASAM MCD-2 MC, commonly called A2L, describes ECU measurement and calibration data, and XCP provides the protocol for accessing it. OpenDRIVE describes road networks, and the other options do not provide measurement and calibration access.

Question 18Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

During a HIL test of an ECU, the plant model runs in real time. Which property must the simulation satisfy so that ECU timing behavior is reproduced faithfully?

  1. The test must run without any bus simulation
  2. The model must use floating point arithmetic exclusively
  3. The simulation step size and jitter must stay within the required real-time budget Correct answer.
  4. The model must be compiled to a static library

Explanation

Real-time HIL testing requires the simulation to complete each step within its deadline with bounded jitter so that the ECU experiences realistic timing. Library form, numeric representation and bus simulation presence are not the defining real-time property.

Question 19Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A HIL test injects a sensor short circuit to ground while the ECU is controlling an actuator. Which test objective does this primarily address?

  1. Checking the flash programming time
  2. Measuring the maximum CPU load of the ECU
  3. Verifying diagnostic fault detection and safe-state reaction Correct answer.
  4. Validating the calibration dataset version

Explanation

Fault injection such as a short circuit verifies that the ECU detects the fault through diagnostics and reacts by entering the specified safe state. CPU load, flash timing and calibration versions are measured or verified through other test objectives.

Question 20Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In ISO 26262-8, what is the purpose of a safety case?

  1. To schedule the test campaigns of the project
  2. To define the bill of materials for the ECU
  3. To list all open defects before release
  4. To argue, with supporting evidence, that the item achieves the required safety Correct answer.

Explanation

The safety case is a structured argument supported by evidence that the item satisfies its safety goals and requirements. Defect lists, bills of materials and schedules are project artifacts but not the safety case itself.

Question 21Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A supplier delivers a safety-related ECU to a vehicle manufacturer. Which ISO 26262 activity confirms that the supplier's development satisfies the agreed safety requirements before series production?

  1. Hardware thermal cycling test
  2. Functional safety assessment by an independent assessor Correct answer.
  3. Vehicle durability road testing
  4. Software unit coverage measurement

Explanation

A functional safety assessment evaluates whether the developed item or element fulfills the safety requirements and is performed with appropriate independence before release. Coverage measurement and environmental tests are supporting verification activities rather than the overall assessment.

Question 22Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which relationship correctly links Automotive SPICE® and ISO 26262 in an ECU development project?

  1. Both standards apply only to hardware development
  2. Automotive SPICE® assesses process capability while ISO 26262 defines safety requirements that the processes must satisfy Correct answer.
  3. Automotive SPICE® replaces ISO 26262 for safety-related software
  4. ISO 26262 defines process capability levels that replace Automotive SPICE® ratings

Explanation

Automotive SPICE® provides a process assessment model for capability, whereas ISO 26262 specifies safety lifecycle requirements and work products. The two are complementary: safety requirements must be met by processes whose capability can be assessed.

Question 23Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In an Automotive SPICE® assessment, a process achieves its process outcomes but has no documented planning, monitoring or corrective action. Which capability level does it at most satisfy?

  1. Level 3
  2. Level 4
  3. Level 1 Correct answer.
  4. Level 2

Explanation

Achieving process outcomes without planning, monitoring and adjustment satisfies only capability level 1. Level 2 requires the managed performance attributes, and higher levels add defined and quantitative process management.

Question 24Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which ISO 26262 requirement applies to the tool used to generate safety-related source code automatically?

  1. The tool must be open source
  2. The tool must be certified by the vehicle manufacturer
  3. The tool must run on the same hardware as the ECU
  4. The tool's impact on safety must be evaluated and confidence established, for example through qualification Correct answer.

Explanation

ISO 26262-8 requires tool confidence to be established based on the tool's possible impact on safety-related work products, typically through tool qualification. Certification by a manufacturer, licensing model and host hardware are not the governing criteria.

Question 25Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A test engineer must verify that the AUTOSAR® diagnostic stack correctly reports a detected fault. Which standard defines the service used to read diagnostic trouble codes?

  1. AUTOSAR SWS RTE
  2. ISO 14229 (UDS) Correct answer.
  3. ISO 26262-6
  4. ASAM MCD-1 XCP

Explanation

ISO 14229 defines unified diagnostic services, including the service to read diagnostic trouble codes from the ECU. ISO 26262-6 covers software testing requirements, XCP covers measurement access, and the RTE specification covers runtime communication.

Question 26Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In Automotive SPICE®, which process group contains the processes that elicit, analyze, and track stakeholder requirements for an ECU project?

  1. MAN (Management) processes
  2. SUP (Supporting) processes
  3. ACQ (Acquisition) processes
  4. SYS (System) processes Correct answer.

Explanation

The SYS process group covers system requirements analysis, system architectural design, and system integration and integration testing, which is where stakeholder requirements are elicited, analyzed, and tracked at system level. Acquisition processes concern supplier selection and agreement, supporting processes provide infrastructure and quality assurance, and management processes handle project and risk management.

Question 27Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

An Automotive SPICE® assessor records that a process has reached capability level 2. Which set of process attributes has therefore been fully achieved?

  1. PA 2.1 and PA 2.2 only
  2. PA 1.1, PA 1.2, PA 2.1, and PA 2.2 Correct answer.
  3. PA 1.1, PA 2.1, and PA 2.2
  4. PA 1.1 and PA 2.1 only

Explanation

Capability level 1 requires PA 1.1 (process performance) and PA 1.2 (performance management). Capability level 2 adds PA 2.1 (performance management of the process) and PA 2.2 (work product management), so reaching level 2 means all four attributes are fully or largely achieved.

Question 28Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A project must show bidirectional traceability from stakeholder requirements down to software unit test results. Which Automotive SPICE® practice most directly supports this evidence?

  1. Performing a supplier capability assessment before contract award
  2. Establishing consistency and bidirectional traceability between requirements and work products across the V-model Correct answer.
  3. Defining a measurement framework for process performance indicators
  4. Establishing a change request management procedure for all configuration items

Explanation

Automotive SPICE® requires consistency and bidirectional traceability between requirements, architecture, and verification work products at each level of the V-model. This traceability chain is exactly what links stakeholder requirements to software unit test results.

Question 29Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In ISO 26262, what distinguishes an Automotive Safety Integrity Level from a quality management target such as Automotive SPICE® capability level?

  1. ASIL applies only to hardware, whereas capability level applies to both hardware and software
  2. ASIL is assigned to processes, whereas capability level is assigned to work products
  3. ASIL is chosen by the supplier, whereas capability level is chosen by the assessor
  4. ASIL expresses the risk reduction needed for a specific item function, whereas capability level expresses the maturity of a process Correct answer.

Explanation

ASIL is derived from severity, exposure, and controllability for a specific hazardous event, so it expresses the safety-related risk reduction needed for that function. Capability levels describe how well a process is performed and are independent of the safety criticality of the product.

Question 30Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A hazard analysis identifies an unintended acceleration event. Which ISO 26262 parameter combination is used to determine the ASIL for this hazardous event?

  1. Fault tolerant time interval, safe state, and diagnostic test interval
  2. Severity, occurrence, and detection as in a design FMEA
  3. Severity, exposure, and controllability Correct answer.
  4. Probability of failure, detectability, and diagnostic coverage

Explanation

ISO 26262 determines the ASIL of a hazardous event from its estimated severity, the probability of exposure to the operational situation, and the controllability by the driver or other persons at risk. These three parameters are combined in the ASIL determination table.

Question 31Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A safety goal is decomposed into two redundant, sufficiently independent safety requirements assigned to two different ECUs. Which ASIL combination is permitted by ISO 26262 for the decomposed requirements when the original goal is ASIL D?

  1. ASIL D and ASIL D
  2. QM and ASIL D
  3. ASIL C and ASIL A
  4. ASIL D and ASIL B(D) Correct answer.

Explanation

ISO 26262 allows ASIL decomposition only when the resulting requirements are sufficiently independent. For an ASIL D goal, permitted combinations include ASIL D(D) with QM(D), or ASIL C(D) with ASIL A(D), or ASIL B(D) with ASIL B(D), where the bracketed letter records the original ASIL.

Question 32Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

An item is developed as a safety element out of context. Which assumption must the supplier document so that the integrator can use the element correctly?

  1. The assumed safety requirements and the conditions of use the element relies on Correct answer.
  2. The name of the tool vendor used for code generation
  3. The production volume forecast for the element
  4. The exact vehicle variant in which the element will be installed

Explanation

For a safety element out of context, the supplier states assumptions of use, including assumed safety requirements, operating conditions, and integration constraints, because the actual vehicle context is unknown. The integrator must verify that these assumptions hold in the target vehicle.

Question 33Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which ISO 26262 work product records the argument that the item is free of unreasonable residual risk, supported by evidence from verification and validation?

  1. The safety case Correct answer.
  2. The hazard analysis and risk assessment report
  3. The safety plan
  4. The hardware architectural metrics report

Explanation

The safety case is the structured argument, backed by evidence, that the item achieves functional safety and is free from unreasonable residual risk. It references verification and validation results as supporting evidence.

Question 34Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A software unit implements a safety-related control loop at ASIL C. Which ISO 26262-6 requirement applies to the structural coverage metric collected during unit testing?

  1. No structural coverage metric is required if requirements-based tests all pass
  2. Modified condition/decision coverage is mandatory at ASIL A
  3. Only statement coverage needs to be measured, because higher metrics apply from ASIL D
  4. Statement coverage is highly recommended and branch coverage is recommended at ASIL C Correct answer.

Explanation

ISO 26262-6 recommends statement coverage for all ASILs and increases the recommendation level with ASIL. At ASIL C, statement coverage is highly recommended and branch coverage is recommended, while MC/DC becomes highly recommended only at ASIL D.

Question 35Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which ISO 26262-6 software architectural principle reduces the risk that a fault in one software component propagates to another component of the same safety-related function?

  1. Use of a single global memory space for all components
  2. Freedom from interference between software components Correct answer.
  3. Allowing unrestricted dynamic memory allocation
  4. Maximizing the number of nested function calls

Explanation

Freedom from interference is a core ISO 26262-6 architectural principle: components are designed so that a fault in one does not corrupt another, for example through memory protection, timing budgets, and communication protection. The other listed practices tend to increase coupling and fault propagation.

Question 36Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which AUTOSAR® basic software module is responsible for monitoring the ECU's internal timing and execution and triggering a reaction when a supervision check fails?

  1. The ECU State Manager (EcuM)
  2. The Diagnostic Event Manager (Dem)
  3. The Communication Manager (ComM)
  4. The Watchdog Manager (WdgM) Correct answer.

Explanation

The Watchdog Manager supervises the execution of monitored entities, checks alive supervision, deadline supervision, and logical supervision, and triggers a configured reaction such as a reset when a check fails. It also services the internal or external watchdog.

Question 37Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In AUTOSAR®, a software component must be mapped to a different runnable entity to meet a revised scheduling requirement without altering its internal behavior. Which configuration element is changed?

  1. The application software component's port interfaces
  2. The software component template version
  3. The mapping of runnables to tasks in the ECU configuration Correct answer.
  4. The internal behavior of the software component

Explanation

Runnables are mapped to operating system tasks during ECU configuration, so remapping runnables to different tasks changes scheduling without touching the component's internal behavior or its interfaces. The internal behavior and ports remain unchanged.

Question 38Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A tester must verify that an AUTOSAR® software component handles a missing receiver for a sender-receiver communication. Which mechanism in the virtual functional bus description is relevant?

  1. The init value of the sender-receiver data element Correct answer.
  2. The alive supervision configuration of the watchdog manager
  3. The cycle time of the operating system counter
  4. The number of runnable entities in the component

Explanation

For sender-receiver communication, the data element's init value defines what a receiver reads before the first write or when communication is not yet established. Testing how the component behaves with this initial value directly addresses the missing-sender scenario.

Question 39Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

In AUTOSAR®, which mechanism allows a service to be provided by one software component and used by another without binding the user to a specific provider at design time?

  1. Inter-runnable variable exchange within one component
  2. Exclusive area protection in the operating system
  3. Sender-receiver communication with a data element
  4. Client-server communication with a service port Correct answer.

Explanation

A client-server service port lets a client component request an operation while the actual provider is resolved during configuration, so the client is not bound to a specific provider instance at design time. This supports flexible distribution of services across the ECU.

Question 40Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which standard defines the Unified Diagnostic Services that an AUTOSAR® diagnostic stack must implement for reading fault memory and executing routines?

  1. ISO 14229 Correct answer.
  2. ISO 13400
  3. ISO 26262-5
  4. ISO 15765-2

Explanation

ISO 14229 specifies the Unified Diagnostic Services, including services such as ReadDTCInformation and RoutineControl. ISO 15765-2 defines transport protocol and segmentation, ISO 13400 defines diagnostics over IP, and ISO 26262-5 covers hardware safety requirements.

Question 41Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A tester wants to verify that the AUTOSAR® diagnostic communication stack segments a long response correctly on a classical CAN bus. Which standard governs this segmentation behavior?

  1. ISO 14229-1
  2. ISO 15765-2 Correct answer.
  3. ISO 22901-1
  4. ISO 26262-6

Explanation

ISO 15765-2 defines the transport protocol on CAN, including segmentation into frames, flow control, and reassembly of long diagnostic messages. The service layer defined in ISO 14229-1 relies on this transport for messages exceeding a single frame.

Question 42Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A test bench must reproduce the behavior of all ECUs missing from the bench so that the device under test receives realistic periodic CAN frames. Which test infrastructure element provides this?

  1. A boundary scan test fixture
  2. A software-in-the-loop plant model without bus interface
  3. A calibration measurement system
  4. A restbus simulation Correct answer.

Explanation

A restbus simulation emulates the absent network participants by sending their periodic and event-driven frames, so the device under test behaves as it would in the real vehicle network. Without it, the ECU would detect missing communication and enter fault reactions.

Question 43Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

During a hardware-in-the-loop test, the plant model must run with a fixed step size and complete each computation before the next step begins. Which property of the test setup does this describe?

  1. Real-time capability of the simulation Correct answer.
  2. Fault injection capability of the test hardware
  3. Deterministic code coverage of the ECU software
  4. Bit-exact equivalence of the plant model to the real vehicle

Explanation

Real-time capability means the simulation completes all computations within each fixed step so that signals are exchanged with the ECU at the correct times. If a step overruns, the ECU sees late or missing inputs and the test results become invalid.

Question 44Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A HIL test injects a broken wire on a wheel speed sensor signal while the ECU is running an ABS function. Which test objective is being pursued?

  1. Measuring the maximum achievable CAN bus load
  2. Confirming the calibration data checksum
  3. Validating the plant model's parameter accuracy
  4. Verifying the ECU's fault detection and reaction to a sensor failure Correct answer.

Explanation

Injecting a broken sensor wire simulates a specific hardware failure so the tester can observe whether the ECU detects it within the required time and enters the specified safe reaction. This targets diagnostic and safety mechanism behavior rather than model accuracy or bus performance.

Question 45Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A test engineer needs to read and modify internal ECU parameters while the ECU runs on a test bench. Which ASAM standard interface supports this measurement and calibration access?

  1. ASAM ODX (ISO 22901)
  2. ASAM OpenSCENARIO
  3. ASAM MCD-2 MC (A2L) with XCP Correct answer.
  4. ASAM MCD-1 CCP only for Ethernet

Explanation

ASAM MCD-2 MC, commonly called A2L, describes the ECU's measurement and calibration objects, and XCP is the protocol used to access them during runtime. Together they enable online measurement and calibration on a bench or in a vehicle.

Question 46Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A supplier delivers a safety-related ECU to a vehicle manufacturer. Which activity confirms that the supplier's development satisfies the agreed safety requirements before series production?

  1. A software unit code review performed only by the supplier
  2. A supplier safety assessment confirming the safety case and evidence against the distributed safety activities Correct answer.
  3. An Automotive SPICE® capability level 3 rating alone
  4. A functional network test of the CAN bus

Explanation

ISO 26262 requires the customer to confirm that distributed safety activities were performed as planned, typically through a supplier safety assessment reviewing the safety case and supporting evidence. This confirms that the delivered item meets the agreed safety requirements.

Question 47Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

Which ISO 26262 requirement applies when an automatic code generator is used to produce safety-related source code at ASIL D?

  1. The tool must be listed in the safety plan as a configuration item
  2. The generated code must be manually rewritten by a developer
  3. The tool must be certified by the tool vendor to ISO 9001
  4. The tool must be qualified, or its output must be verified by an alternative method to the same confidence Correct answer.

Explanation

ISO 26262-8 requires tool qualification for software tools used in safety-related development, based on the tool's possible impact on safety and the confidence needed. Alternatively, the tool's output can be verified by an independent method to the required confidence, avoiding full qualification.

Question 48Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A test team plans verification activities for a safety-related system. Which ISO 26262 characteristic distinguishes verification from validation?

  1. Verification uses static analysis, whereas validation uses dynamic testing
  2. Verification is performed by the supplier, whereas validation is performed by the assessor
  3. Verification is performed only at the software level, whereas validation is performed only at the vehicle level
  4. Verification confirms that work products meet their specified requirements, whereas validation confirms that the safety goals are met in the intended context Correct answer.

Explanation

In ISO 26262, verification checks that work products satisfy the requirements defined for them at each development phase, while validation confirms that the integrated item or vehicle achieves the safety goals in its intended operational context. The two activities differ in the question they answer, not in who performs them.

Question 49Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

An ISO 26262 safety plan for an ECU project must define which elements in addition to the safety activities and their schedule?

  1. The marketing plan for the vehicle model
  2. The list of all competitors' safety concepts
  3. The bill of materials for the ECU housing
  4. The responsibilities and the required independence of the persons performing the safety activities Correct answer.

Explanation

The safety plan defines the safety activities, their dependencies and timing, the responsible persons, and the required independence to avoid conflicts of interest in confirmation measures. These elements make the safety activities auditable and confirmable.

Question 50Testing E/E systems in the automotive environment based on established standards (Automotive SPICE®, ISO 26262, AUTOSAR®)

A safety-related ECU uses a monitoring function implemented in a separate software component. Which ISO 26262 concept describes the ability of the monitoring function to detect and mitigate faults in the monitored function?

  1. Safety mechanism Correct answer.
  2. Proven in use argument
  3. Confirmation measure
  4. Safety element out of context

Explanation

A safety mechanism is a technical solution implemented in the system or its elements to detect faults and control or mitigate their effects, such as a plausibility check or a watchdog. The monitoring component is therefore the safety mechanism for the monitored function.