19.2.1 Fundamental Concepts in QA and Testing


Quality Assurance and Testing are intricate domains with their terminology and classifications. Let’s delve into some foundational concepts, including the distinction between verification and validation and the various types of testing.

Verification vs. Validation

  1. Verification:
    • DefinitionVerification involves checking whether the product is being developed correctly, adhering to the specified requirements. It’s about ensuring that “you are building the product right.”
    • MethodsThis can involve reviews, walkthroughs, inspections, and desk-checking.
    • ExampleIn software development, verification might involve checking design documents to ensure they align with requirement specifications.
  2. Validation:
    • DefinitionValidation is about ensuring that the developed product meets the user’s needs and requirements. It checks if “you are building the right product.”
    • MethodsThis usually involves actual testing, such as functional testing, usability testing, and user acceptance testing.
    • ExampleIn software, validation would involve executing the software under varying conditions to ensure it meets user needs.

Types of Testing

  1. Manual vs. Automated Testing:
    • Manual Testing: As the name suggests, it involves human testers manually executing test cases without the assistance of tools or scripts.
      • Pros: More adaptable to short-term changes, provides qualitative feedback.
      • Cons: Time-consuming, prone to human errors, less consistent.
  • Automated Testing: Utilizes software tools and scripts to run tests on a product. These tests can be run repeatedly and consistently.
    • Pros: Faster, more consistent, ideal for repetitive tasks and regression testing.
    • Cons: Initial setup cost, might not catch every bug, can miss usability issues.
  • Functional vs. Non-functional Testing:
    • Functional TestingFocuses on the functional aspects of an application; it verifies if the application works as per the defined specifications and requirements. Examples include unit testing, integration testing, and system testing.
    • Non-functional TestingFocuses on aspects not related to specific functions or user actions, such as performance, usability, reliability, etc. Examples include:
      • Performance Testing: Assesses the performance and speed of applications.
      • Usability TestingEnsures that the product is user-friendly.
      • Reliability TestingChecks the product’s reliability over time.
      • Security TestingEnsures that the application is protected against potential threats.
  • Conclusion

    Grasping these fundamental concepts is crucial for anyone diving into the world of QA and testing, especially in domains like telecommunications and IT, where precision, reliability, and performance are paramount. Whether ensuring that requirements are accurately implemented (verification) or guaranteeing that a product serves its intended purpose (validation), rigorous testing processes ensure that products meet the highest quality standards.



    Key terms in plain language

    Open a term for a concise explanation of language used on this page.

    Cybersecurity

    The practices and controls used to protect identities, devices, networks, applications, and data from unauthorized access, disruption, or manipulation.

    Zero Trust

    A security model that does not automatically trust a user or device because of its location. Access is continuously verified and limited to what is necessary.

    SASE

    Secure Access Service Edge combines networking and security capabilities in a cloud-delivered architecture so users and locations can receive consistent policy wherever they connect.

    Identity and Access Management (IAM)

    The systems and policies that determine who a user is, what resources they may access, and how that access is authenticated and reviewed.

    Multi-Factor Authentication (MFA)

    A login control requiring more than one form of verification, such as a password plus an authenticator app, security key, or biometric factor.

    MDR / XDR

    Security services and tools that monitor activity, investigate suspicious behavior, and help contain threats. MDR is managed detection and response; XDR correlates signals across multiple security layers.