ISTQB Glossary · Chapter 6
ISTQB Glossary — Chapter 6: Test Tools
Chapter 6 is the tooling chapter, and it is the largest vocabulary set on this site because the industry keeps inventing names for things the syllabus already had a word for. Read it as a translation layer: whatever your team calls the thing in your pipeline, the exam has a category name for it, and questions are written in category names.
The chapter classifies tools by the activity they support — management and lifecycle tools, static testing and review tools, test design and data preparation tools, execution and coverage tools, non-functional tools for performance and security, and DevOps tooling that runs all of the above on every commit. It also covers the human side of tooling, which is where the exam questions actually live: the benefits and risks of test automation, the cost of ownership beyond the licence, the need for a pilot project before rollout, and the success factors for introducing a tool into an organisation.
The technical vocabulary worth memorising is the substitution family: stub, driver, mock, harness and service virtualisation, each replacing a different missing piece around the component you are actually testing. Getting these straight also makes you better at reviewing unit tests, because most flaky-test arguments in real teams are arguments about which of these a developer used.
Three mistakes candidates make. First, assuming automation reduces test effort — the syllabus is blunt that automation shifts effort into building and maintaining the automation, and answers promising 'less work' are wrong. Second, mixing up a stub (stands in for a component the code under test calls) with a driver (calls the code under test in place of a missing caller); the direction of the dependency is the whole distinction. Third, skipping the pilot: questions about introducing a tool into an organisation almost always have 'run a pilot project and evaluate against objectives' as the correct answer, however tempting the immediate-rollout option looks.
Every Chapter 6 term, defined and explained
Each entry gives the official ISTQB definition (attributed and quoted), our own plain-English reading of it, and a concrete example from delivery work.
A/B Testing
A method of comparing two versions of a feature or page against each other to determine which one performs better.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Show version A to some users and version B to others, then compare metrics.
From real testing work
Two weeks before a release the test manager compares planned versus executed cases, open defects by severity, and remaining effort. A/B Testing is where that number comes from — and the exam cares that it is used to inform a decision, not just published.
Exam tip
A/B testing is a shift-right, experiment-driven form of production testing.
Related: shift right testing, feature flag, test in production
A/B Testing
An experiment comparing two variants of a feature to determine which performs better against a defined metric.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Showing version A to some users and B to others to see which wins.
From real testing work
A signup form passes the automated scanner with zero violations, then fails the moment a tester unplugs the mouse: focus jumps from the email field straight to the footer. A/B Testing work catches exactly that gap between tool output and a real person completing the task.
const results = await new AxeBuilder({ page }).analyze();
expect(results.violations).toEqual([]);
// then: keyboard-only pass, Tab order recorded in the charter notesExam tip
A/B testing is a product analytics technique, not defect detection — but QA often validates the variant delivery works correctly.
Related: feature flag, canary release, dark launch
Actions Class (Selenium)
A Selenium API for advanced user gestures such as drag-and-drop, hover, keyboard chords, and multi-touch.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Selenium’s API for complex interactions like drag-and-drop and hovering.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Actions Class is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Common interview question: how to hover, right-click, or drag-drop with Selenium.
Allure Report
An open-source test reporting framework producing rich, interactive test result dashboards.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A polished test report with charts, history, and step-level detail.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Allure Report is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Allure integrates with JUnit, TestNG, pytest, and Playwright — near-universal QA reporting.
Related: test report, test summary report, extent reports
Ansible
An open-source configuration management and automation tool using YAML playbooks over SSH.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A YAML-based automation tool for configuring servers.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Ansible is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Ansible is agentless — the primary contrast with Chef and Puppet.
Related: infrastructure as code, terraform
Apache JMeter
An open-source Java load-testing tool for measuring performance of web applications, APIs, databases, and messaging.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most widely used open-source performance testing tool.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Apache JMeter is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Thread groups, samplers, listeners, and assertions are the four core JMeter building blocks.
Related: load testing, performance testing, k6
Apache Kafka
A distributed event streaming platform capable of handling high-throughput, real-time data feeds.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A high-throughput system for streaming events between services.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Apache Kafka is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Testers verify producer/consumer contracts, message ordering, and consumer lag.
Related: message queue, rabbitmq, microservices testing
API Gateway
A server that acts as the single entry point for API clients, handling routing, authentication, rate limiting, and other cross-cutting concerns.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A front door for your APIs handling auth, routing, and rate limits.
From real testing work
During a pre-release security pass, a tester submits `' OR 1=1 --` into a search box and watches the response. Work like that sits under api gateway: deliberately behaving like an attacker against your own system, in a controlled environment, with written permission.
curl -s "https://staging.example.com/api/search?q=%27%20OR%201%3D1%20--" \
-H "Authorization: Bearer $TOKEN" | jq '.results | length'
# a jump from 12 to 4,812 results is the findingExam tip
Kong, AWS API Gateway, and Apigee are common gateways — testers verify routing, throttling, and auth.
Related: rest api testing, oauth, rate limiting
Appium
An open-source cross-platform automation framework for native, hybrid, and mobile web apps on iOS and Android using the WebDriver protocol.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The Selenium equivalent for mobile apps — one API, iOS and Android.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a appium that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Appium reuses WebDriver, so Selenium testers can transfer skills quickly to mobile automation.
Related: mobile testing
Applitools
A visual AI testing platform that uses machine learning to detect meaningful visual differences and ignore layout noise.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A visual testing platform that uses AI to filter out irrelevant diffs.
From real testing work
A résumé-screening model scores candidates from 0 to 1. There is no single expected value to assert against, so applitools is checked statistically: accuracy on a held-out set, score distribution compared across demographic slices, and an alert when the live distribution drifts from training.
assert accuracy_score(y_true, y_pred) >= 0.87
gap = abs(tpr(group_a) - tpr(group_b))
assert gap < 0.05, f"fairness gap too wide: {gap:.3f}"Exam tip
Applitools’ Visual AI reduces the false-positive noise typical of pixel-diff tools.
Related: percy, visual regression testing, chromatic
Argo CD
A GitOps continuous delivery tool for Kubernetes that syncs cluster state to a declared Git repository.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A GitOps tool that keeps your Kubernetes cluster in sync with what’s in Git.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Argo CD shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Argo CD and Flux are the two dominant GitOps controllers.
Related: gitops, kubernetes, pipeline as code
Assertion
A statement in a test that verifies an expected condition holds, causing the test to fail if the condition is false.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The check inside a test that decides pass or fail.
From real testing work
Where you meet this in real work: during a sprint, assertion is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Prefer one logical assertion per test — makes failures easier to diagnose.
Exam tip
Prefer one logical assertion per test — makes failures easier to diagnose.
Related: test oracle, unit testing
axe-core
An open-source accessibility testing engine used by many tools to detect WCAG violations in web pages.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most widely used engine for automated accessibility checks.
From real testing work
A signup form passes the automated scanner with zero violations, then fails the moment a tester unplugs the mouse: focus jumps from the email field straight to the footer. axe-core work catches exactly that gap between tool output and a real person completing the task.
const results = await new AxeBuilder({ page }).analyze();
expect(results.violations).toEqual([]);
// then: keyboard-only pass, Tab order recorded in the charter notesExam tip
axe-core powers Lighthouse, jest-axe, and cypress-axe — one engine, many wrappers.
Azure DevOps Test Plans
Microsoft’s test management module in Azure DevOps for planning, executing, and tracking manual and automated tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Microsoft’s test management inside Azure DevOps.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Azure DevOps Test Plans is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Common in .NET shops using the full Azure DevOps suite.
Related: test management tool, jira
Behave
A Python BDD framework that runs Gherkin feature files with step definitions written in Python.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Cucumber for Python.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Behave is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Behave is the standard Python BDD tool for Gherkin-based scenarios.
Benefits of Test Automation
Advantages gained from automating tests, including faster execution, higher repeatability, reduced manual effort and earlier defect detection.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Speed, repeatability, wider coverage, faster feedback, fewer manual errors.
From real testing work
After a sprint of bug fixes the team runs the unit suite with coverage on and finds the discount calculator sits at 62%. Benefits of Test Automation tells them which lines or branches never executed — usually the error paths nobody wrote a test for.
npx vitest run --coverage
# ---------------------|---------|----------|
# File | % Stmts | % Branch |
# discount.ts | 62.5 | 41.6 |Exam tip
Syllabus asks you to list benefits AND risks — always memorize both sides.
Related: test automation, risks of test automation, continuous integration
BlazeMeter
A cloud-based performance testing platform compatible with JMeter, Gatling, k6, and Selenium scripts.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A cloud service for running JMeter-style perf tests at massive scale.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. BlazeMeter is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
BlazeMeter runs JMeter scripts in the cloud — no local infrastructure needed.
Related: jmeter, load testing, performance testing
Capture / Replay Tool
A tool that records test input while a test is executed manually, and generates a scripted test that can then be executed multiple times.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Record actions once, replay them as an automated test.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Capture / Replay Tool is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Fast to create but very fragile to UI change — largely superseded by modern frameworks.
Related: test automation, record and playback, test execution tool
Chaos Monkey
A tool developed by Netflix that randomly terminates instances in production to ensure that engineers implement their services to be resilient to instance failures.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A bot that kills random servers in production so the system is forced to survive failure.
From real testing work
A tester files: "Checkout returns HTTP 500 when the cart contains a gift card and a subscription." Steps, expected, actual, environment, build number. Chaos Monkey is one of the fields or states in that workflow, and getting the term right is what makes the report actionable for the developer picking it up at 9am.
Exam tip
Chaos Monkey seeded the chaos engineering discipline.
Related: chaos engineering, resilience testing, shift right testing
Charles Proxy
A commercial cross-platform HTTP proxy and monitor for inspecting network traffic.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A GUI proxy for inspecting HTTP traffic during mobile and web testing.
From real testing work
The Android app works perfectly on the team's Pixel and crashes on a three-year-old budget device on a 3G connection. Charles Proxy is what keeps that from reaching production: a device matrix chosen from real analytics, not from what is on people's desks.
Exam tip
Charles is popular in mobile QA for observing app-to-backend calls.
Chromatic
A visual testing and review platform built for Storybook components.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A visual testing platform designed for Storybook-based component libraries.
From real testing work
A requirements review on a "forgot password" story raises that the acceptance criteria never say what happens to an unverified email address. That is chromatic in practice — an issue found in a document, before a single line of code exists, at a fraction of the cost of finding it in UAT.
Exam tip
Chromatic pairs naturally with Storybook — component-level visual regression.
Related: percy, applitools, visual regression testing
CI/CD
The combined practice of continuous integration and continuous delivery or deployment, supported by automated build, test, and release pipelines.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The automated pipeline that builds, tests, and ships code on every change.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. CI/CD shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
CI + CD is the backbone of DevOps delivery.
Related: continuous integration, continuous delivery, continuous deployment
CircleCI
A cloud-based CI/CD platform that runs builds defined in a .circleci/config.yml file.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A popular cloud CI/CD platform.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. CircleCI shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Orbs (reusable config packages) and workflows are the CircleCI hallmarks.
Related: ci cd, github actions, jenkins
Code Coverage Tool
A tool that provides measurements of what parts of a software product have been executed by a test suite.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Measures which lines/branches your tests actually ran.
From real testing work
After a sprint of bug fixes the team runs the unit suite with coverage on and finds the discount calculator sits at 62%. Code Coverage Tool tells them which lines or branches never executed — usually the error paths nobody wrote a test for.
npx vitest run --coverage
# ---------------------|---------|----------|
# File | % Stmts | % Branch |
# discount.ts | 62.5 | 41.6 |Exam tip
Coverage is a guide, not a target — 100% coverage does not mean bug-free.
Related: statement coverage, branch coverage, white box testing
Codegen
A Playwright utility that generates test code by recording user interactions in a browser.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A recorder that writes Playwright test code as you click around.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Codegen is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Great for scaffolding tests fast — always refactor into Page Objects before committing.
Related: playwright, page object model, capture replay tool
Commercial Tool
A test tool sold by a vendor under a proprietary license, typically with paid support.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
UFT/QTP, TestComplete, LoadRunner — paid tools with vendor support.
From real testing work
Where you meet this in real work: during a sprint, commercial tool is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Commercial tools give you vendor support and SLA — open-source gives you flexibility.
Exam tip
Commercial tools give you vendor support and SLA — open-source gives you flexibility.
Related: test tool, open source tool, tool selection
Comparator
A test tool that compares two files, databases or sets of test results.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A diff engine used to compare actual vs expected output automatically.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Comparator is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Snapshot and visual regression tools are modern comparators.
Related: visual testing, test oracle, regression testing
Container
A lightweight, standalone, executable package that includes everything needed to run an application: code, runtime, libraries, and settings.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A portable, isolated bundle of an app and its dependencies.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Container shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Containers share the host OS kernel — lighter than VMs, heavier than plain processes.
Related: docker, kubernetes
Continuous Integration Tool
A tool that automatically builds and tests software each time changes are committed to the version control system.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Jenkins, GitHub Actions, GitLab CI, CircleCI — build, test and report on every commit.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Continuous Integration Tool is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
CI tools are the execution home of most test automation — design tests to be CI-friendly.
Related: continuous integration, continuous delivery, test automation
Coverage Tool
A tool that provides objective measures of what structural elements, e.g. statements, branches, have been exercised by the test suite.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
JaCoCo, Istanbul, Coverage.py — reports which lines/branches your tests actually hit.
From real testing work
After a sprint of bug fixes the team runs the unit suite with coverage on and finds the discount calculator sits at 62%. Coverage Tool tells them which lines or branches never executed — usually the error paths nobody wrote a test for.
npx vitest run --coverage
# ---------------------|---------|----------|
# File | % Stmts | % Branch |
# discount.ts | 62.5 | 41.6 |Exam tip
Coverage tools plug into unit-test frameworks and CI; use branch coverage as the minimum bar.
Related: code coverage, statement coverage, branch coverage
CSS Selector
A pattern for selecting HTML elements by tag, id, class, attribute, or hierarchy, commonly used for element location in automation.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A syntax for finding elements the way CSS styles them.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. CSS Selector is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Faster and more readable than XPath for most cases — preferred default in Selenium and Playwright.
Cucumber-JVM
A Java implementation of Cucumber for running Gherkin BDD scenarios in JVM projects.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Cucumber for Java projects.
From real testing work
Where you meet this in real work: during a sprint, cucumber-jvm is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Cucumber-JVM integrates with JUnit, TestNG, and Spring — dominant in Java BDD.
Exam tip
Cucumber-JVM integrates with JUnit, TestNG, and Spring — dominant in Java BDD.
Related: cucumber, gherkin, behavior driven development
cy.intercept
A Cypress command that stubs, spies on, or modifies network requests during tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Cypress’s network-mocking command.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a cy.intercept that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
cy.intercept replaces the older cy.route and is the modern way to stub APIs in Cypress.
Related: cypress, msw, mock server
Cypress
A JavaScript end-to-end testing framework that runs in the same event loop as the app under test, offering fast, deterministic UI tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A developer-friendly E2E test framework built for modern JavaScript apps.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Cypress is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Cypress runs inside the browser — trade-off: fast and reliable, but limited cross-origin and multi-tab support.
Related: playwright, selenium, end to end testing
Cypress Retries
A Cypress feature that automatically re-runs failed tests a configurable number of times to reduce flakiness impact.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Cypress feature to auto-retry failing tests.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Cypress Retries is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Use retries sparingly — they hide flakiness rather than fix root causes.
Related: cypress, flaky test
Dark Launch
The practice of releasing new functionality to production without exposing it to end users, in order to test in the real environment.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Ship the code live but keep it hidden so you can test it in production without users seeing it.
From real testing work
Staging has last quarter's anonymised production snapshot, seeded with fifteen deliberately broken accounts. Dark Launch covers how that is created, versioned and restored — because a suite that passes only on Tuesday's data is not a suite you can trust.
make db-reset && make seed-fixtures ENV=staging
# fixtures are versioned with the tests, in the same commitExam tip
Combine with feature flags to switch on gradually per user segment.
Related: feature flag, canary release, test in production
DAST (Dynamic Application Security Testing)
The analysis of a running application to identify security vulnerabilities.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Security scanning of a live system — finds issues SAST can't see.
From real testing work
During a pre-release security pass, a tester submits `' OR 1=1 --` into a search box and watches the response. Work like that sits under dast: deliberately behaving like an attacker against your own system, in a controlled environment, with written permission.
curl -s "https://staging.example.com/api/search?q=%27%20OR%201%3D1%20--" \
-H "Authorization: Bearer $TOKEN" | jq '.results | length'
# a jump from 12 to 4,812 results is the findingExam tip
SAST and DAST together are stronger than either alone.
Related: sast, security testing, penetration testing
Data Masking
A method of creating a structurally similar but inauthentic version of data. The purpose of data masking is to protect sensitive data while providing a functional substitute.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Take real data and scramble the sensitive bits (names, SSNs) so the shape is real but the values are fake.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a data masking that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Data masking is the fastest way to make a prod snapshot safe for lower environments.
Related: synthetic data, test data, security testing
Data-Driven Testing
A scripting technique that stores test input and expected results in a table or spreadsheet, so that a single control script can execute all of the tests in the table.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
One test script + a table of inputs and expected outputs = many test runs.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Data-Driven Testing is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Data-driven is the entry-level automation pattern; keyword-driven and BDD build on top of it.
Related: keyword driven testing, test automation, test data
Debugging Tool
A tool used by programmers to reproduce failures, investigate the state of programs and find the corresponding defect.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Chrome DevTools, gdb, IDE debuggers — step through code and inspect state.
From real testing work
A tester files: "Checkout returns HTTP 500 when the cart contains a gift card and a subscription." Steps, expected, actual, environment, build number. Debugging Tool is one of the fields or states in that workflow, and getting the term right is what makes the report actionable for the developer picking it up at 9am.
Exam tip
Debugging is a developer activity — the syllabus is careful to separate testing from debugging.
Related: defect, dynamic analysis tool, logging
Defect Tracking Tool
A tool that facilitates the recording and status tracking of defects and changes.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
JIRA, Bugzilla, Mantis — where bug reports live and move through their state model.
From real testing work
A résumé-screening model scores candidates from 0 to 1. There is no single expected value to assert against, so defect tracking tool is checked statistically: accuracy on a held-out set, score distribution compared across demographic slices, and an alert when the live distribution drifts from training.
assert accuracy_score(y_true, y_pred) >= 0.87
gap = abs(tpr(group_a) - tpr(group_b))
assert gap < 0.05, f"fairness gap too wide: {gap:.3f}"Exam tip
Every defect tracking tool implements a defect workflow (state model) — customize it, don't fight it.
Related: defect management, defect report, test management tool
Deployment Tool
A tool that supports the deployment of a component or system into its target environment.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Ansible, Terraform, ArgoCD, Octopus — push builds into environments consistently.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Deployment Tool is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Deployment tools enable blue-green and canary releases without manual steps.
Related: continuous deployment, blue green deployment, canary release
Detox
A gray-box end-to-end testing framework for React Native mobile applications.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
An E2E testing framework built specifically for React Native apps.
From real testing work
The Android app works perfectly on the team's Pixel and crashes on a three-year-old budget device on a 3G connection. Detox is what keeps that from reaching production: a device matrix chosen from real analytics, not from what is on people's desks.
Exam tip
Detox syncs with the app runtime to eliminate flakiness — preferred over Appium for RN.
Docker
A platform for packaging applications and their dependencies into portable containers.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A tool that packages an app and everything it needs into a portable container.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Docker shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Testers use Docker to spin up databases, mock services, and consistent test environments.
Related: container, kubernetes, ephemeral environment
Docker Compose
A tool for defining and running multi-container Docker applications using a YAML file.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A YAML file that starts many containers together as one app.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Docker Compose shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Docker Compose is ideal for local integration-test environments.
Related: docker, container, testcontainers
Dockerfile
A text file containing the instructions to build a Docker image.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The recipe file that tells Docker how to build an image.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Dockerfile is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Multi-stage Dockerfiles are the standard for slim production images.
Related: docker, container, docker compose
Driver
A software component or test tool that replaces a component that takes care of the control and/or the calling of a component or system.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Fake caller code that invokes the module under test when the real caller doesn't exist yet.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a driver that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Drivers simulate the layer above; stubs simulate the layer below.
Related: stub, test harness, integration testing
Driver (Test Driver)
A component that replaces the calling code and simulates its behavior for the purpose of testing.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A piece of code that calls a low-level module so it can be tested in isolation.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a driver that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Drivers are needed for bottom-up integration; stubs for top-down.
Related: stub, unit testing, bottom up integration
Dummy Object
A test double passed around but never actually used, typically to fill parameter lists.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
An empty placeholder object used to satisfy a signature.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a dummy object that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Dummies are the simplest test double — used when a parameter is required but irrelevant.
Related: stub, mock object, test double
Dynamic Analysis Tool
A tool that provides run-time information on the state of the software code, e.g. memory allocation, use and deallocation, use of pointers and possible race conditions.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Valgrind, AddressSanitizer — watches a running program for memory leaks, race conditions, undefined behavior.
From real testing work
Where you meet this in real work: during a sprint, dynamic analysis tool is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Dynamic analysis catches defects only when the code actually runs — pair with high-coverage tests.
Exam tip
Dynamic analysis catches defects only when the code actually runs — pair with high-coverage tests.
Related: dynamic testing, static analysis tool, performance testing tool
Emulator
A device, computer program, or system that accepts the same inputs and produces the same outputs as a given system.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Software that pretends to be a different device or system for testing.
From real testing work
The Android app works perfectly on the team's Pixel and crashes on a three-year-old budget device on a 3G connection. Emulator is what keeps that from reaching production: a device matrix chosen from real analytics, not from what is on people's desks.
Exam tip
Emulators mimic behaviour end-to-end; simulators approximate specific parts.
Related: simulator tool, test environment, mobile testing
Ephemeral Environment
A short-lived environment created for a specific purpose, such as a pull-request or a single test run, and destroyed afterwards.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A throw-away environment created for one PR or one test cycle.
From real testing work
Staging has last quarter's anonymised production snapshot, seeded with fifteen deliberately broken accounts. Ephemeral Environment covers how that is created, versioned and restored — because a suite that passes only on Tuesday's data is not a suite you can trust.
make db-reset && make seed-fixtures ENV=staging
# fixtures are versioned with the tests, in the same commitExam tip
Prevents environment drift and flaky shared-state bugs.
Related: test environment provisioning, infrastructure as code, test environment
Espresso
A native Android UI testing framework from Google that runs inside the app process for fast, reliable automation of Android apps.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Google’s official framework for testing Android apps from inside the app.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Espresso is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Espresso auto-syncs with the UI thread, eliminating most explicit waits — a key advantage over Appium for Android-only projects.
Related: appium, xcuitest, mobile testing
Explicit Wait
A wait that pauses execution until a specific condition is met, such as element visibility or clickability.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Waiting for a specific condition, like "button is clickable", before continuing.
From real testing work
Where you meet this in real work: during a sprint, explicit wait is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Explicit waits (WebDriverWait) are the recommended synchronization approach.
Exam tip
Explicit waits (WebDriverWait) are the recommended synchronization approach.
Related: implicit wait, fluent wait
ExtentReports
A commercial and open-source reporting library for automation tests, commonly used with Java, Selenium, and TestNG.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A popular Java library that generates rich HTML test reports.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. ExtentReports is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
ExtentReports and Allure are the two dominant Java automation report tools.
Related: allure, test report, testng
Fake
A test double with a working implementation but shortcuts that make it unsuitable for production, such as an in-memory database.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A working but simplified stand-in — e.g. an in-memory DB.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a fake that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Fakes are common for repositories and file systems in unit tests.
Related: stub, mock object, test double
Feature Toggle
A software development technique that turns features on or off at runtime without deploying new code, enabling progressive delivery and testing in production.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A switch that turns features on or off without redeploying.
From real testing work
Where you meet this in real work: during a sprint, feature toggle is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. LaunchDarkly, Split, and Unleash are common flag platforms — testers verify variant delivery and rollback.
Exam tip
LaunchDarkly, Split, and Unleash are common flag platforms — testers verify variant delivery and rollback.
Related: feature flag, canary release, dark launch
Fiddler
A web debugging proxy tool from Progress for inspecting and modifying HTTP(S) traffic.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A classic Windows HTTP debugging proxy from Progress (formerly Telerik).
From real testing work
A tester files: "Checkout returns HTTP 500 when the cart contains a gift card and a subscription." Steps, expected, actual, environment, build number. Fiddler is one of the fields or states in that workflow, and getting the term right is what makes the report actionable for the developer picking it up at 9am.
Exam tip
Fiddler is common in Windows-centric QA environments.
Related: mitmproxy, charles proxy
Flaky Test
A test that produces both passing and failing results without any change to the code or test itself.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A test that sometimes passes and sometimes fails on the same build — usually a timing or environment issue.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Flaky Test is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Flaky tests destroy trust in the suite — quarantine and fix immediately, don't ignore.
Related: test automation, risks of test automation, test script
Fluent Wait
A configurable wait that polls at a defined frequency and ignores specified exceptions until a condition is met or timeout expires.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A customizable wait that polls at set intervals and can ignore certain errors.
From real testing work
A tester files: "Checkout returns HTTP 500 when the cart contains a gift card and a subscription." Steps, expected, actual, environment, build number. Fluent Wait is one of the fields or states in that workflow, and getting the term right is what makes the report actionable for the developer picking it up at 9am.
Exam tip
Fluent waits give the finest control — use when default WebDriverWait behavior is insufficient.
Related: implicit wait, explicit wait
Gatling
A high-performance open-source load testing tool written in Scala using a fluent DSL and asynchronous IO.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Scala-based performance testing tool known for beautiful reports.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Gatling is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Gatling uses an event-driven architecture — very efficient at high concurrency.
Related: jmeter, k6, load testing
Git
A distributed version control system for tracking changes in source code.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The standard version control system used everywhere.
From real testing work
Two weeks before a release the test manager compares planned versus executed cases, open defects by severity, and remaining effort. Git is where that number comes from — and the exam cares that it is used to inform a decision, not just published.
Exam tip
Every QA engineer must know branch, merge, rebase, and how to resolve conflicts.
Related: version control, pull request, trunk based development
Git Branch
A lightweight movable pointer to a commit, used to isolate work such as features or fixes.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A separate line of development in Git.
From real testing work
After a bad release the team runs a root-cause session and changes the definition of done rather than adding more tests at the end. Git Branch sits on that side of the fence: preventive and process-oriented, distinct from executing tests against a build.
Exam tip
Branch strategies: trunk-based, GitFlow, GitHub Flow — know when each fits.
Related: git, pull request, trunk based development
Git Merge
A Git operation that integrates changes from one branch into another, preserving history.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Combining changes from one branch into another.
From real testing work
Where you meet this in real work: during a sprint, git merge is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Merge preserves history; rebase rewrites it. Know both.
Exam tip
Merge preserves history; rebase rewrites it. Know both.
Git Rebase
A Git operation that moves or replays commits from one branch onto another to produce a linear history.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Rewriting your branch to sit on top of another branch for a clean history.
From real testing work
Where you meet this in real work: during a sprint, git rebase is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Never rebase shared branches — only local, unpushed work.
Exam tip
Never rebase shared branches — only local, unpushed work.
GitHub Actions
A CI/CD platform built into GitHub that runs workflows defined in YAML in response to repository events.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Built-in CI/CD for GitHub repos, configured with YAML workflows.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. GitHub Actions is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Matrix builds and reusable workflows are common interview follow-ups.
GitLab CI/CD
A CI/CD system integrated into GitLab that runs pipelines defined in a .gitlab-ci.yml file.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
GitLab’s built-in CI/CD system, configured in .gitlab-ci.yml.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. GitLab CI/CD shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Stages, jobs, and runners are the core primitives.
Related: ci cd, github actions, jenkins
GitOps
A operational model where the desired state of infrastructure and applications is declared in Git and reconciled automatically to the running system.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Managing your infrastructure and deployments through Git commits.
From real testing work
A résumé-screening model scores candidates from 0 to 1. There is no single expected value to assert against, so gitops is checked statistically: accuracy on a held-out set, score distribution compared across demographic slices, and an alert when the live distribution drifts from training.
assert accuracy_score(y_true, y_pred) >= 0.87
gap = abs(tpr(group_a) - tpr(group_b))
assert gap < 0.05, f"fairness gap too wide: {gap:.3f}"Exam tip
Argo CD and Flux are the two dominant GitOps controllers on Kubernetes.
Related: pipeline as code, infrastructure as code, deployment
GraphQL Testing
Testing of GraphQL APIs covering queries, mutations, subscriptions, schema validation, and resolver behavior.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing GraphQL APIs — one endpoint, flexible queries.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. GraphQL Testing is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
GraphQL testing focuses on schema contracts, N+1 query performance, and authorization at the field level.
Related: rest api testing, api testing
gRPC Testing
Testing of gRPC services using Protocol Buffers, covering unary, server-streaming, client-streaming, and bidirectional RPC calls.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing gRPC APIs — the high-performance protocol used between microservices.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. gRPC Testing is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
gRPC tests typically use generated stubs; contract testing is critical since schemas are strongly typed.
Related: rest api testing, api testing, microservices testing
Headless Browser
A web browser without a graphical user interface, used to run UI tests faster and in CI environments.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A browser with no visible window — perfect for running tests in CI.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Headless Browser is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Headless Chrome and Firefox are standard for CI; Playwright and Puppeteer default to headless.
Helm
A package manager for Kubernetes that bundles resources into reusable charts.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The package manager for Kubernetes.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Helm shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Helm charts are the standard way to distribute Kubernetes applications.
Related: kubernetes, pod, deployment k8s
Hydration
The process of attaching client-side JavaScript interactivity to server-rendered HTML.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Bringing a server-rendered page to life on the client with JavaScript.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Hydration is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Hydration mismatches are a top source of Next.js/TanStack Start production bugs.
Related: ssr testing, end to end testing
Hyperlink Testing Tool
A tool used to check that no broken hyperlinks are present on a website.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Link checkers like broken-link-checker or W3C Link Checker.
From real testing work
Where you meet this in real work: during a sprint, hyperlink testing tool is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Broken links hurt SEO and UX — cheap to catch, expensive to leave.
Exam tip
Broken links hurt SEO and UX — cheap to catch, expensive to leave.
Related: static analysis tool, test tool, accessibility testing
Ice-Cream Cone Anti-Pattern
A test distribution anti-pattern with many manual and UI tests but few unit tests — the inverse of the test pyramid.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A test suite that is heavy on UI and manual, light on unit — the opposite of the pyramid.
From real testing work
The same discount rule is verified three times: in a unit test on the calculator, in an API test against the pricing service, and once through the UI at checkout. Ice-Cream Cone Anti-Pattern names one of those layers — different test basis, different owner, different defects found.
// component level
expect(calcDiscount(100, "SAVE10")).toBe(90);
// system level
const res = await api.post("/cart/apply", { code: "SAVE10" });
expect(res.body.total).toBe(90);Exam tip
Slow, brittle CI is almost always caused by an ice-cream-cone distribution.
Related: test pyramid, test trophy, flaky test
Idempotency
The property of an operation that produces the same result whether it is executed once or many times.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Doing the same thing twice has the same effect as doing it once.
From real testing work
Where you meet this in real work: during a sprint, idempotency is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Test idempotency by replaying the same request and verifying no duplicate side effects — critical for payments and webhooks.
Exam tip
Test idempotency by replaying the same request and verifying no duplicate side effects — critical for payments and webhooks.
Related: webhook testing, api testing, retry pattern
Implicit Wait
A Selenium setting that polls the DOM for a set time when trying to find an element before throwing an exception.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A global wait telling Selenium to keep trying to find elements for N seconds.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Implicit Wait is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Avoid mixing implicit and explicit waits — behavior becomes unpredictable.
Related: explicit wait, fluent wait
Istio
An open-source service mesh built on Envoy for controlling traffic, security, and observability across microservices.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most widely used service mesh, built on Envoy.
From real testing work
During a pre-release security pass, a tester submits `' OR 1=1 --` into a search box and watches the response. Work like that sits under istio: deliberately behaving like an attacker against your own system, in a controlled environment, with written permission.
curl -s "https://staging.example.com/api/search?q=%27%20OR%201%3D1%20--" \
-H "Authorization: Bearer $TOKEN" | jq '.results | length'
# a jump from 12 to 4,812 results is the findingExam tip
Istio provides mTLS, traffic shifting, and telemetry — key for canary and blue-green in K8s.
Related: service mesh, linkerd, mtls
JavaScript Executor (Selenium)
A Selenium interface for executing JavaScript in the context of the current page.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Selenium hook to run JavaScript inside the tested page.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. JavaScript Executor is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Use JSExecutor for scrolling, shadow-DOM access, and reading computed styles.
Jenkins
An open-source automation server for building, testing, and deploying software, extensible through thousands of plugins.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most widely used open-source CI/CD server.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Jenkins is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Jenkinsfile (declarative pipeline) is the modern way to configure builds as code.
Related: ci cd, pipeline as code, github actions
Jest
A JavaScript testing framework from Meta with built-in mocking, snapshot testing, and parallel execution.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most popular JavaScript test framework, batteries included.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a jest that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Jest ships snapshots, mocks, coverage, and parallelism in one package.
Related: mocha, snapshot testing, unit testing
Jira
A widely used issue and project tracking tool from Atlassian, commonly integrated with test management add-ons.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Atlassian’s issue and workflow tracker.
From real testing work
Where you meet this in real work: during a sprint, jira is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Jira is the default backlog/defect tracker for most QA orgs.
Exam tip
Jira is the default backlog/defect tracker for most QA orgs.
Related: defect tracking tool, test management tool, xray
JUnit
A widely used open-source unit testing framework for Java, providing annotations, assertions, and test lifecycle hooks.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The standard unit testing framework for Java.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. JUnit is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
JUnit 5 (Jupiter) is the modern version — knows extensions, parameterized tests, and dynamic tests.
Related: unit testing, testng, assertion
k6
A modern open-source load-testing tool by Grafana Labs that uses JavaScript for test scripting and is designed for CI-friendly performance testing.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A developer-friendly JS-based load testing tool.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. k6 is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
k6 scripts are JavaScript modules with a default function — easy to plug into CI.
Related: jmeter, gatling, load testing
Karate DSL
An open-source framework combining API test automation, mocks, performance, and UI in a single Gherkin-based DSL.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Gherkin-based framework that tests APIs, mocks, and performance from one tool.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a karate dsl that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Karate needs no Java code for API tests — pure Gherkin plus JSON matchers.
Related: rest api testing, api testing, gherkin
Katalon Studio
A commercial low-code test automation platform for web, mobile, API, and desktop testing.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A commercial low-code automation platform covering web, mobile, and API.
From real testing work
The Android app works perfectly on the team's Pixel and crashes on a three-year-old budget device on a 3G connection. Katalon Studio is what keeps that from reaching production: a device matrix chosen from real analytics, not from what is on people's desks.
Exam tip
Katalon wraps Selenium and Appium with a low-code UI — popular with non-programmer QA teams.
Related: selenium, appium, test automation framework
Keyword-Driven Testing
A scripting technique that uses data files to contain not only test data and expected results, but also keywords related to the application being tested.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Write tests as spreadsheets of keywords ('login', 'add to cart') instead of code — non-coders can maintain them.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Keyword-Driven Testing is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Robot Framework and Cucumber are the best-known keyword/BDD tools.
Related: data driven testing, behavior driven development, test automation
Kubernetes (K8s)
An open-source platform for automating deployment, scaling, and management of containerized applications.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The standard system for running and scaling containers in production.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Kubernetes shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Testers hit Kubernetes when validating deployments, autoscaling, and blue-green/canary releases.
Related: docker, container, canary release
Kubernetes Deployment
A Kubernetes resource that declaratively manages a set of identical pods, handling rolling updates and rollbacks.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A K8s resource that keeps a set of pods running and updates them safely.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Kubernetes Deployment shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Deployments handle rolling updates, rollbacks, and scaling declaratively.
Related: pod, kubernetes, rolling deployment
Kubernetes Ingress
A Kubernetes resource that manages external HTTP/HTTPS access to services in a cluster, providing routing and TLS termination.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The Kubernetes resource that exposes services to outside traffic.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Kubernetes Ingress shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Ingress controllers (nginx, Traefik) do the actual traffic routing.
Related: kubernetes, pod, deployment k8s
Kubernetes Service
A Kubernetes resource that provides a stable network endpoint for a set of pods.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A stable network address for a group of pods, even as they come and go.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Kubernetes Service shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
ClusterIP, NodePort, and LoadBalancer are the three main service types.
Related: pod, kubernetes, ingress
Lighthouse
An open-source auditing tool from Google that scores web pages for performance, accessibility, SEO, and best practices.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Google’s built-in tool that grades a page on perf, a11y, and SEO.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Lighthouse is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Lighthouse is integrated in Chrome DevTools and CI — a common baseline QA metric.
Related: performance testing, a11y, real user monitoring
Linkerd
An open-source, lightweight service mesh for Kubernetes focused on simplicity and low overhead.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A lightweight alternative to Istio.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Linkerd shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Linkerd wins on simplicity and low resource use; Istio wins on features.
Related: service mesh, istio, kubernetes
Linter
A tool that analyses source code to flag programming errors, bugs, stylistic errors, and suspicious constructs.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The nagging tool that catches typos, unused vars, and style issues before they reach review.
From real testing work
A requirements review on a "forgot password" story raises that the acceptance criteria never say what happens to an unverified email address. That is linter in practice — an issue found in a document, before a single line of code exists, at a fraction of the cost of finding it in UAT.
Exam tip
Prefer configurable linters that match your team's conventions.
Related: static analysis tool, static analysis, review
LoadRunner
A commercial performance and load testing tool by Micro Focus, widely used in enterprise environments.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The classic enterprise performance testing tool.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. LoadRunner is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
LoadRunner is common in banking, telecom, and government performance benches.
Related: jmeter, k6, performance testing
Locator
A mechanism for identifying an element in the UI under test, such as id, name, CSS selector, XPath, or accessibility role.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
How your test finds a button, link, or field on the page.
From real testing work
A signup form passes the automated scanner with zero violations, then fails the moment a tester unplugs the mouse: focus jumps from the email field straight to the footer. Locator work catches exactly that gap between tool output and a real person completing the task.
const results = await new AxeBuilder({ page }).analyze();
expect(results.violations).toEqual([]);
// then: keyboard-only pass, Tab order recorded in the charter notesExam tip
Prefer stable locators: id > data-testid > role > CSS > XPath. Text-based locators are brittle across i18n.
Related: xpath, css selector, page object model
Locust
A Python-based load testing tool where user behavior is defined in code and tests can scale across multiple machines.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Python load testing tool where each virtual user is a class you write.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Locust is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Locust scales via distributed workers — good fit when your team already writes Python.
Related: jmeter, k6, load testing
Maestro
A modern mobile UI testing framework with a simple YAML-based syntax and built-in flake tolerance.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A new mobile test framework that uses simple YAML flows.
From real testing work
The Android app works perfectly on the team's Pixel and crashes on a three-year-old budget device on a 3G connection. Maestro is what keeps that from reaching production: a device matrix chosen from real analytics, not from what is on people's desks.
Exam tip
Maestro is gaining rapid adoption for its readable YAML syntax and reliability.
Message Queue
A component that stores messages between producers and consumers to enable asynchronous, decoupled communication.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A buffer that holds messages while producers and consumers work at different speeds.
From real testing work
Where you meet this in real work: during a sprint, message queue is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Testing queues covers ordering, at-least-once vs. exactly-once delivery, and dead-letter handling.
Exam tip
Testing queues covers ordering, at-least-once vs. exactly-once delivery, and dead-letter handling.
Related: kafka, rabbitmq, microservices testing
mitmproxy
An open-source interactive HTTPS proxy for intercepting, inspecting, and modifying traffic.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
An open-source proxy for capturing and tweaking HTTPS requests during testing.
From real testing work
Where you meet this in real work: during a sprint, mitmproxy is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. mitmproxy is scriptable in Python — great for API test debugging and security testing.
Exam tip
mitmproxy is scriptable in Python — great for API test debugging and security testing.
Related: charles proxy, fiddler
Mocha
A flexible JavaScript test framework running on Node.js and browsers with support for asynchronous testing.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A popular JS test runner, often paired with Chai for assertions.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Mocha is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Mocha + Chai + Sinon is the classic JS unit testing stack.
Related: jest, unit testing, assertion
Mock Object
A skeletal or special-purpose implementation of a software component, used to develop or test a component that calls or otherwise depends on it. It replaces the real component for testing and mimics its API but with pre-programmed expectations.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A fake dependency you configure to expect specific calls and assert on them afterwards.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a mock object that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Mocks vs stubs: stubs feed data in, mocks verify behavior out.
Related: stub, service virtualization, unit test framework tool
Mock Server
A tool that simulates the behavior of a real API or service to enable testing without the actual dependency.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A fake API you control so tests aren’t blocked by real backends.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a mock server that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
WireMock, Mockoon, and MSW are common mock servers used in test suites.
Related: stub, service virtualization, api testing
Mock Service Worker (MSW)
A library that intercepts requests at the network level using service workers for browser and Node, enabling seamless API mocking in tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A library that fakes API responses in browser and Node tests.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a mock service worker that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
MSW is the modern JS mocking standard — same mocks work in dev, test, and Storybook.
Related: wiremock, mock server, stub
Mockoon
A free open-source desktop application for creating mock REST APIs quickly without coding.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A GUI tool to spin up fake REST APIs in minutes.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a mockoon that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Great for prototyping and front-end development when the real backend isn’t ready.
Related: wiremock, mock server, service virtualization
Monitoring Tool
A software tool that runs concurrently with the component or system under test and supervises, records and/or analyzes its behavior.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
New Relic, Datadog, Prometheus — watch the app in real time.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Monitoring Tool is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Monitoring tools are essential for shift-right testing and testing in production.
Related: monitoring, observability, shift right testing
MSTest
Microsoft’s built-in unit testing framework for .NET, integrated with Visual Studio.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The unit test framework built into Visual Studio.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. MSTest is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
MSTest is common in Microsoft-shop enterprises; new projects usually pick xUnit.net.
Related: nunit, xunit net, unit testing
NeoLoad
A commercial performance testing platform from Tricentis with support for web, mobile, and API load testing.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A commercial perf testing platform used in enterprise DevOps pipelines.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. NeoLoad is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
NeoLoad is Tricentis’ perf tool, often paired with Tosca functional automation.
Related: jmeter, loadrunner, performance testing
Newman
A command-line runner for executing Postman collections in CI environments and generating reports.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The CLI that runs Postman collections in your build pipeline.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Newman shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Newman + a Postman collection is the fastest way to add API tests to CI.
Related: postman, postman collection, ci cd
Nightwatch.js
An open-source end-to-end testing framework for web applications and mobile, built on Node.js and WebDriver.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A JS E2E framework built on WebDriver.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a nightwatch.js that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Nightwatch competed with Cypress and Playwright but has lost mindshare.
Related: selenium, cypress, playwright
NUnit
An open-source unit testing framework for the .NET platform, inspired by JUnit.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
JUnit for .NET.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. NUnit is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
NUnit and xUnit.net are the two dominant .NET test frameworks.
Related: xunit net, mstest, unit testing
Offline Testing
Verification that an application behaves correctly when the network is unavailable, including caching, queueing, and reconciliation.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing that the app still works when there’s no internet.
From real testing work
Where you meet this in real work: during a sprint, offline testing is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Test offline creates, offline reads from cache, and online reconciliation of queued writes.
Exam tip
Test offline creates, offline reads from cache, and online reconciliation of queued writes.
Related: pwa testing, service worker, mobile network testing
Open-Source Tool
A test tool whose source code is freely available, typically maintained by a community, and often free to use.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Selenium, JMeter, Playwright, JUnit — free tools with community support.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Open-Source Tool is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Open-source is not 'no cost' — factor in training, integration, and maintenance.
Related: test tool, test execution tool, tool selection
OpenAPI (Swagger)
A specification for describing REST APIs in a machine-readable format, enabling documentation, code generation, and contract testing.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A standard format for describing what an API can do.
From real testing work
A story reads "As a returning customer I can reuse a saved card." Before estimating it, the three amigos add acceptance criteria for an expired card and a card removed from the account. OpenAPI is the artefact or link involved, and it is what lets you prove later that every requirement has at least one test.
Exam tip
OpenAPI 3.x is the current standard; Swagger 2.0 is legacy but still common.
Related: swagger, rest api testing, contract testing modern
Pa11y
An open-source command-line tool for automated accessibility testing of web pages.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A CLI tool for running accessibility checks in CI.
From real testing work
A signup form passes the automated scanner with zero violations, then fails the moment a tester unplugs the mouse: focus jumps from the email field straight to the footer. Pa11y work catches exactly that gap between tool output and a real person completing the task.
const results = await new AxeBuilder({ page }).analyze();
expect(results.violations).toEqual([]);
// then: keyboard-only pass, Tab order recorded in the charter notesExam tip
Pa11y CI generates per-page reports and thresholds — good for gating builds on a11y.
Pact
A consumer-driven contract testing tool and specification for verifying interactions between services.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most popular consumer-driven contract testing tool.
From real testing work
A story reads "As a returning customer I can reuse a saved card." Before estimating it, the three amigos add acceptance criteria for an expired card and a card removed from the account. Pact is the artefact or link involved, and it is what lets you prove later that every requirement has at least one test.
Exam tip
Pact broker stores contracts; verification runs in both consumer and provider CI.
Related: contract testing modern, consumer driven contract, api testing
Page Factory
A design pattern in Selenium that initializes page elements lazily using annotations like @FindBy.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Selenium pattern that wires up page elements via annotations.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Page Factory is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Page Factory is a specialized Page Object flavor — Java-heavy usage.
Related: page object model, selenium, webdriver
Page Object Model
A design pattern in test automation that encapsulates web page elements and interactions into reusable classes, improving maintainability.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Wrap each page/screen in a class so tests interact with methods (login()) not raw selectors.
From real testing work
A résumé-screening model scores candidates from 0 to 1. There is no single expected value to assert against, so page object model is checked statistically: accuracy on a held-out set, score distribution compared across demographic slices, and an alert when the live distribution drifts from training.
assert accuracy_score(y_true, y_pred) >= 0.87
gap = abs(tpr(group_a) - tpr(group_b))
assert gap < 0.05, f"fairness gap too wide: {gap:.3f}"Exam tip
POM is the de facto standard for maintainable Selenium and Playwright suites.
Related: test automation framework, test automation, test script
page.route (Playwright)
A Playwright API for intercepting and modifying network requests made by the browser during a test.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Playwright’s network interception API.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. page.route is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
page.route is Playwright’s equivalent of Cypress’s cy.intercept.
Related: playwright, cy intercept, msw
Parallel Execution
Running multiple tests simultaneously across threads, processes, or machines to reduce total execution time.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Running tests at the same time instead of one after another.
From real testing work
Where you meet this in real work: during a sprint, parallel execution is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Requires test isolation — flaky tests explode in parallel runs.
Exam tip
Requires test isolation — flaky tests explode in parallel runs.
Related: test isolation, selenium grid, flaky test
Percy
A visual review platform that captures screenshots during test runs and highlights visual differences across builds.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A tool that catches unintended visual changes across your app’s pages.
From real testing work
A requirements review on a "forgot password" story raises that the acceptance criteria never say what happens to an unverified email address. That is percy in practice — an issue found in a document, before a single line of code exists, at a fraction of the cost of finding it in UAT.
Exam tip
Percy, Applitools, and Chromatic are the top three visual testing platforms.
Related: visual regression testing, applitools, chromatic
Performance Testing Tool
A tool that generates a load on a test object and measures its response times and system resource usage during execution.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
JMeter, Gatling, k6, LoadRunner — drive high load and record response times.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Performance Testing Tool is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Load-test scripts must follow the operational profile or the results are meaningless.
Related: performance testing, load testing, operational profile
Pipeline as Code
The practice of defining CI/CD pipelines in version-controlled files rather than through a UI.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The pipeline lives in your repo as a YAML or DSL file.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Pipeline as Code shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Enables review, rollback, and reuse of pipeline logic.
Related: ci cd, continuous integration, version control
Playwright
An open-source Node.js library from Microsoft for browser automation across Chromium, Firefox, and WebKit with auto-wait, tracing, and network interception.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A modern, fast browser automation tool that competes with Selenium and Cypress.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Playwright is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Playwright ships auto-wait, trace viewer, network mocking, and codegen out of the box.
Playwright Fixtures
A Playwright feature for composable, scoped test setup that automatically provides context, pages, and custom resources.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Playwright’s way to inject browser context, pages, and helpers into tests.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Playwright Fixtures is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Fixtures are the recommended alternative to before/after hooks in Playwright.
Related: playwright, fixture, test isolation
Pod
The smallest deployable unit in Kubernetes, consisting of one or more containers sharing network and storage.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The smallest deployable unit in Kubernetes — usually a single container.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Pod shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Pods share network namespace and volumes; ephemeral by design.
Related: kubernetes, container, deployment k8s
Postman
A widely used API development and testing platform providing request building, mocking, monitoring, and collection execution.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most popular API testing and exploration tool.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a postman that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Postman covers exploration, contract, functional, and monitoring — a QA staple.
Related: postman collection, newman, rest api testing
Postman Collection
A group of saved Postman requests organized into folders, used for API testing, documentation, and automation.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A saved bundle of API requests you can share and run together.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Postman Collection is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Collections are the deployable unit of Postman — export/import via JSON, run via Newman.
Related: postman, newman, rest api testing
Pre-Production Environment
An environment that mirrors production as closely as possible, used for final validation before release.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The last environment before production — mirrors it as closely as possible.
From real testing work
Staging has last quarter's anonymised production snapshot, seeded with fifteen deliberately broken accounts. Pre-Production Environment covers how that is created, versioned and restored — because a suite that passes only on Tuesday's data is not a suite you can trust.
make db-reset && make seed-fixtures ENV=staging
# fixtures are versioned with the tests, in the same commitExam tip
Pre-prod is where release-candidate smoke and perf tests typically run.
Related: staging environment, test environment
Profiler
A tool used by developers to gather run-time information on the performance of the code being executed.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Measures where your code spends its time and memory.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Profiler is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Profilers are the go-to tool for diagnosing performance regressions.
Related: performance testing, performance efficiency, monitoring tool
Progressive Delivery
A set of deployment practices — canary, feature flags, blue-green — that release changes gradually to reduce blast radius.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Rolling out features to small groups first before everyone gets them.
From real testing work
Staging has last quarter's anonymised production snapshot, seeded with fifteen deliberately broken accounts. Progressive Delivery covers how that is created, versioned and restored — because a suite that passes only on Tuesday's data is not a suite you can trust.
make db-reset && make seed-fixtures ENV=staging
# fixtures are versioned with the tests, in the same commitExam tip
Combines canary releases, feature flags, and observability to safely deploy fast.
Related: canary release, feature flag, blue green deployment
Proof of Concept
A demonstration in principle that shows the feasibility of a particular idea, tool or approach in a limited context.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A small pilot to prove a tool actually works in your environment before you commit budget.
From real testing work
Two weeks before a release the test manager compares planned versus executed cases, open defects by severity, and remaining effort. Proof of Concept is where that number comes from — and the exam cares that it is used to inform a decision, not just published.
Exam tip
PoC scope: 1-2 sprints, 1-2 typical use cases, 1-2 evaluators.
Related: tool selection, tool adoption, test tool
Pull Request
A request to merge code changes from one branch into another, typically reviewed and approved before merging.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The GitHub/GitLab mechanism used to propose and review code changes.
From real testing work
A requirements review on a "forgot password" story raises that the acceptance criteria never say what happens to an unverified email address. That is pull request in practice — an issue found in a document, before a single line of code exists, at a fraction of the cost of finding it in UAT.
Exam tip
PRs are where code review, CI checks, and merge policies meet in modern workflows.
Related: code review, pipeline as code, gitops
Puppeteer
A Node.js library from Google providing a high-level API to control headless Chrome or Chromium.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Google’s Node library for automating Chrome.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Puppeteer is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Puppeteer is Chrome-only; Playwright (its successor) supports all major browsers.
Related: playwright, selenium, headless browser
PWA Testing
Testing of progressive web apps covering installability, offline mode, service workers, and web app manifest behavior.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing web apps that install and work offline like native apps.
From real testing work
Where you meet this in real work: during a sprint, pwa testing is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Verify service worker cache strategies, offline flows, and add-to-home-screen.
Exam tip
Verify service worker cache strategies, offline flows, and add-to-home-screen.
Related: offline testing, ssr testing, service worker
pytest
A Python testing framework known for concise syntax, fixtures, parameterization, and a rich plugin ecosystem.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The de-facto Python test framework.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. pytest is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Fixtures, parametrize, and markers are the top pytest interview topics.
Related: unit testing, fixture
qTest
A commercial test management platform by Tricentis for enterprise QA teams.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Tricentis’ enterprise test management platform.
From real testing work
Where you meet this in real work: during a sprint, qtest is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. qTest integrates tightly with Tosca and Jira.
Exam tip
qTest integrates tightly with Tosca and Jira.
Related: test management tool, tosca, jira
Quality Gate
A checkpoint in a delivery pipeline that must be passed for the build to proceed, typically enforcing coverage, security, and code-quality thresholds.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A pass/fail check the build must clear before moving to the next stage.
From real testing work
After a sprint of bug fixes the team runs the unit suite with coverage on and finds the discount calculator sits at 62%. Quality Gate tells them which lines or branches never executed — usually the error paths nobody wrote a test for.
npx vitest run --coverage
# ---------------------|---------|----------|
# File | % Stmts | % Branch |
# discount.ts | 62.5 | 41.6 |Exam tip
SonarQube quality gates are the most common example — they block merges on regressions.
Related: exit criteria, pipeline as code, definition of done
RabbitMQ
An open-source message broker implementing AMQP, supporting queues, exchanges, and routing patterns.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A popular open-source message broker for queueing work between services.
From real testing work
Where you meet this in real work: during a sprint, rabbitmq is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. RabbitMQ is queue-first; Kafka is log-first — know the difference.
Exam tip
RabbitMQ is queue-first; Kafka is log-first — know the difference.
Related: kafka, message queue
Record & Playback
An approach to test automation in which tests are created by recording manual user actions and then replayed.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Modern name for capture/replay — great for smoke tests, poor for maintainable suites.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Record & Playback is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Prefer explicit selectors and page objects for anything long-lived.
Related: capture replay tool, test automation, page object model
Record and Playback Tool
A tool that supports test automation by recording user actions and replaying them for test purposes.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Selenium IDE, Katalon Recorder — record a browser session, replay it as a test.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Record and Playback Tool is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Recorded scripts are brittle; convert to code-based or Page Object Model tests for long-term use.
Related: test automation, test execution tool, page object model
Requirements Management Tool
A tool that supports the recording of requirements, requirements attributes and the traceability through layers of requirements and requirements change management.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
JIRA, DOORS, Jama — where requirements are stored, versioned and traced.
From real testing work
A story reads "As a returning customer I can reuse a saved card." Before estimating it, the three amigos add acceptance criteria for an expired card and a card removed from the account. Requirements Management Tool is the artefact or link involved, and it is what lets you prove later that every requirement has at least one test.
Exam tip
Traceability from requirement to test to defect starts in the requirements management tool.
Related: traceability, traceability matrix, test management tool
REST API Testing
Validation of RESTful web services covering endpoints, request/response payloads, status codes, headers, authentication, and error handling.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing REST APIs — the URLs and JSON payloads behind most web apps.
From real testing work
During a pre-release security pass, a tester submits `' OR 1=1 --` into a search box and watches the response. Work like that sits under rest api testing: deliberately behaving like an attacker against your own system, in a controlled environment, with written permission.
curl -s "https://staging.example.com/api/search?q=%27%20OR%201%3D1%20--" \
-H "Authorization: Bearer $TOKEN" | jq '.results | length'
# a jump from 12 to 4,812 results is the findingExam tip
Common REST test tools: Postman, RestAssured, Karate, Playwright API, Supertest.
Related: api testing, contract testing modern
REST Assured
A Java DSL for testing REST APIs with a fluent given/when/then syntax.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Java library for writing readable REST API tests.
From real testing work
Where you meet this in real work: during a sprint, rest assured is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Given/When/Then chaining and JSONPath validation are core REST Assured skills.
Exam tip
Given/When/Then chaining and JSONPath validation are core REST Assured skills.
Related: rest api testing, api testing
Risks of Test Automation
Potential downsides of automating tests, including high initial investment, maintenance cost, false confidence and skill requirements.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Upfront cost, maintenance burden, false confidence, brittle scripts, wrong tests automated.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Risks of Test Automation is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Automating unstable tests amplifies flakiness — stabilize first, automate second.
Related: test automation, benefits of test automation, flaky test
Robot Framework
An open-source keyword-driven test automation framework used for acceptance testing and RPA.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A keyword-driven, human-readable automation framework.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Robot Framework is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Robot Framework is popular for cross-team automation because keyword syntax is non-programmer-friendly.
Related: keyword driven testing, selenium, test automation framework
Rolling Deployment
A deployment strategy that gradually replaces instances of the previous version with the new one, one batch at a time.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Replacing old servers with new ones a few at a time.
From real testing work
Staging has last quarter's anonymised production snapshot, seeded with fifteen deliberately broken accounts. Rolling Deployment covers how that is created, versioned and restored — because a suite that passes only on Tuesday's data is not a suite you can trust.
make db-reset && make seed-fixtures ENV=staging
# fixtures are versioned with the tests, in the same commitExam tip
Rolling is the default Kubernetes deployment strategy.
Related: blue green deployment, canary release, kubernetes
RSpec
A behavior-driven development testing framework for Ruby with an expressive DSL.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The standard BDD-style test framework for Ruby.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. RSpec is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
RSpec pioneered describe/it/expect DSL — copied by Jest and many others.
Related: behavior driven development, unit testing
Sandbox Environment
An isolated environment used for experimentation, third-party integration testing, or safe execution of untrusted code.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A safe playground environment isolated from production data.
From real testing work
The same discount rule is verified three times: in a unit test on the calculator, in an API test against the pricing service, and once through the UI at checkout. Sandbox Environment names one of those layers — different test basis, different owner, different defects found.
// component level
expect(calcDiscount(100, "SAVE10")).toBe(90);
// system level
const res = await api.post("/cart/apply", { code: "SAVE10" });
expect(res.body.total).toBe(90);Exam tip
Payment providers (Stripe, PayPal) offer sandboxes for integration testing without real money.
Related: staging environment, test environment
SAST (Static Application Security Testing)
The analysis of computer software from within, without executing the program, to detect security vulnerabilities.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Security scanning of source code — catches vulnerabilities before running.
From real testing work
During a pre-release security pass, a tester submits `' OR 1=1 --` into a search box and watches the response. Work like that sits under sast: deliberately behaving like an attacker against your own system, in a controlled environment, with written permission.
curl -s "https://staging.example.com/api/search?q=%27%20OR%201%3D1%20--" \
-H "Authorization: Bearer $TOKEN" | jq '.results | length'
# a jump from 12 to 4,812 results is the findingExam tip
Complementary to DAST which tests the running app.
Related: static analysis tool, dast, security testing
Security Testing Tool
A tool that supports operational security by scanning for vulnerabilities, misconfigurations, or attack surfaces.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Burp Suite, OWASP ZAP, Nessus — scan for vulnerabilities and simulate attacks.
From real testing work
During a pre-release security pass, a tester submits `' OR 1=1 --` into a search box and watches the response. Work like that sits under security testing tool: deliberately behaving like an attacker against your own system, in a controlled environment, with written permission.
curl -s "https://staging.example.com/api/search?q=%27%20OR%201%3D1%20--" \
-H "Authorization: Bearer $TOKEN" | jq '.results | length'
# a jump from 12 to 4,812 results is the findingExam tip
Security tools split into SAST (static), DAST (dynamic), IAST and RASP.
Related: security testing, attack testing, static analysis tool
Selenium
An open-source suite for automating web browsers, including WebDriver, IDE, and Grid.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most widely used open-source browser automation toolkit.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a selenium that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Selenium 4+ is W3C WebDriver-compliant and adds relative locators plus Chrome DevTools access.
Related: webdriver, selenium grid, appium
Selenium Grid
A tool that distributes Selenium tests across multiple machines and browsers in parallel through a hub-and-node architecture.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A cluster that runs Selenium tests on many browsers and machines at once.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Selenium Grid is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Grid 4 unifies hub and node into distributed components — parallelization is the top scaling technique.
Related: selenium, webdriver, parallel execution
Selenium IDE
A browser extension that records, edits, and replays user interactions as Selenium tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Selenium record-and-playback browser extension.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Selenium IDE is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Selenium IDE is fine for exploration but not for production suites.
Related: selenium, capture replay tool, codegen
Service Mesh
A dedicated infrastructure layer for handling service-to-service communication in microservices, providing routing, security, and observability.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A layer under microservices that handles their talking-to-each-other.
From real testing work
During a pre-release security pass, a tester submits `' OR 1=1 --` into a search box and watches the response. Work like that sits under service mesh: deliberately behaving like an attacker against your own system, in a controlled environment, with written permission.
curl -s "https://staging.example.com/api/search?q=%27%20OR%201%3D1%20--" \
-H "Authorization: Bearer $TOKEN" | jq '.results | length'
# a jump from 12 to 4,812 results is the findingExam tip
Istio and Linkerd are the two leading service mesh implementations.
Related: istio, linkerd, microservices testing
Service Virtualization
A method to emulate the behavior of specific components in heterogeneous, component-based applications such as API-driven applications, cloud-based applications and SOA.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Fake entire services (payments, third-party APIs) so tests aren't blocked by them.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a service virtualization that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Service virtualization scales beyond unit-test mocks and covers whole systems (WireMock, Mountebank).
Related: mock object, api testing, test environment
Service Worker
A script that a browser runs in the background separately from a web page, enabling offline caching, push notifications, and background sync.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A script that runs behind a webpage to enable offline mode and push notifications.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Service Worker is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Service workers are what make PWAs installable and offline-capable.
Related: pwa testing, offline testing
Setup and Teardown
Code that runs before (setup) and after (teardown) each test to prepare and clean up the test environment.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The before-each and after-each hooks that prep and clean up around tests.
From real testing work
Staging has last quarter's anonymised production snapshot, seeded with fifteen deliberately broken accounts. Setup and Teardown covers how that is created, versioned and restored — because a suite that passes only on Tuesday's data is not a suite you can trust.
make db-reset && make seed-fixtures ENV=staging
# fixtures are versioned with the tests, in the same commitExam tip
Proper teardown is essential to keep tests isolated and repeatable.
Related: fixture, test isolation
Shadow Deployment
A deployment strategy that sends production traffic to a new version in parallel without affecting user responses.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Sending live traffic to a new version silently to test it under real load.
From real testing work
Staging has last quarter's anonymised production snapshot, seeded with fifteen deliberately broken accounts. Shadow Deployment covers how that is created, versioned and restored — because a suite that passes only on Tuesday's data is not a suite you can trust.
make db-reset && make seed-fixtures ENV=staging
# fixtures are versioned with the tests, in the same commitExam tip
Shadowing validates behavior and performance without user impact — great before a canary.
Related: canary release, blue green deployment, dark launch
Shift Everywhere
A modern quality approach combining shift-left prevention and shift-right monitoring so quality is validated across the entire delivery lifecycle.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing early AND in production — quality everywhere in the pipeline.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Shift Everywhere shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Shift-everywhere reframes QA from a phase to a continuous property.
Related: shift left, shift right, continuous testing
Shift-Left
The practice of moving testing and quality activities earlier in the software development lifecycle.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Test as early as possible — reviews, unit tests, static analysis, dev-time checks.
From real testing work
A requirements review on a "forgot password" story raises that the acceptance criteria never say what happens to an unverified email address. That is shift-left in practice — an issue found in a document, before a single line of code exists, at a fraction of the cost of finding it in UAT.
Exam tip
Shift-left reduces the cost of defects; every ISTQB syllabus emphasizes it.
Related: shift left testing, static testing, test driven development
Shift-Right
The practice of extending testing activities into production using techniques such as monitoring, A/B testing and observability.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Keep testing after release — with monitoring, feature flags, A/B tests and canaries.
From real testing work
Two weeks before a release the test manager compares planned versus executed cases, open defects by severity, and remaining effort. Shift-Right is where that number comes from — and the exam cares that it is used to inform a decision, not just published.
Exam tip
Shift-right catches issues that only appear at real scale and with real users.
Related: shift right testing, test in production, observability
Simulator
A device, computer program or system used during testing which behaves or operates like a given system when provided with a set of controlled inputs.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A model that mimics part of a real system for testing.
From real testing work
The Android app works perfectly on the team's Pixel and crashes on a three-year-old budget device on a 3G connection. Simulator is what keeps that from reaching production: a device matrix chosen from real analytics, not from what is on people's desks.
Exam tip
Simulators are lighter than emulators but less faithful.
Related: emulator, service virtualization, test environment
SOAP API Testing
Testing of SOAP web services covering XML request/response payloads, WSDL contracts, and SOAP-specific fault handling.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing older XML-based web services.
From real testing work
A tester files: "Checkout returns HTTP 500 when the cart contains a gift card and a subscription." Steps, expected, actual, environment, build number. SOAP API Testing is one of the fields or states in that workflow, and getting the term right is what makes the report actionable for the developer picking it up at 9am.
Exam tip
SOAP still dominates in finance, government, and telecom back-end systems.
Related: rest api testing, api testing, contract testing modern
SpecFlow
A .NET BDD framework that binds Gherkin scenarios to C# step definitions.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Cucumber for .NET/C#.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. SpecFlow is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
SpecFlow is the de facto BDD tool for .NET teams.
Related: cucumber, gherkin, behavior driven development
Spy
A test double that wraps a real object and records how it was called for later verification.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A stand-in that records calls made to it for later inspection.
From real testing work
A requirements review on a "forgot password" story raises that the acceptance criteria never say what happens to an unverified email address. That is spy in practice — an issue found in a document, before a single line of code exists, at a fraction of the cost of finding it in UAT.
Exam tip
Spies verify interactions after the fact, without pre-set expectations like mocks.
Related: stub, mock object, test double
SSR Testing
Verification that server-side-rendered pages produce correct HTML, hydrate cleanly on the client, and preserve SEO metadata.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing that server-rendered pages match what the client shows after hydration.
From real testing work
Where you meet this in real work: during a sprint, ssr testing is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. SSR bugs typically show as hydration mismatches — HTML from server disagrees with client React tree.
Exam tip
SSR bugs typically show as hydration mismatches — HTML from server disagrees with client React tree.
Related: hydration, end to end testing
Static Analysis Tool
A tool that carries out static code analysis. The tool checks source code for certain properties such as conformance to coding standards, quality metrics or data flow anomalies.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
SonarQube, ESLint, SpotBugs — analyzes code without running it and flags problems.
From real testing work
A requirements review on a "forgot password" story raises that the acceptance criteria never say what happens to an unverified email address. That is static analysis tool in practice — an issue found in a document, before a single line of code exists, at a fraction of the cost of finding it in UAT.
Exam tip
Static analysis tools are cheap to add to CI and catch defects earlier than any test.
Related: static analysis, lint, coding standard
Storybook
An open-source workshop for building and testing UI components in isolation.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A tool for developing and testing UI components on their own.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Storybook is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Storybook + Chromatic gives component-level visual regression testing.
Related: chromatic, visual regression testing, snapshot testing
Stripe Testing
Practices for testing Stripe integrations using test API keys, test cards, sandbox webhooks, and Stripe CLI.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing Stripe payment flows with test cards and sandbox webhooks.
From real testing work
The same discount rule is verified three times: in a unit test on the calculator, in an API test against the pricing service, and once through the UI at checkout. Stripe Testing names one of those layers — different test basis, different owner, different defects found.
// component level
expect(calcDiscount(100, "SAVE10")).toBe(90);
// system level
const res = await api.post("/cart/apply", { code: "SAVE10" });
expect(res.body.total).toBe(90);Exam tip
Stripe’s test cards trigger specific decline scenarios — a key coverage area for payment QA.
Related: webhook testing, idempotency, sandbox
Stub
A skeletal or special-purpose implementation of a software component, used to develop or test a component that calls or is otherwise dependent on it.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Fake code you drop in for a not-yet-built dependency so your module can be tested.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a stub that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Stub returns hard-coded values; mock also verifies how it was called.
Related: driver, mock object, test harness
SuperTest
A Node.js library for testing HTTP endpoints on top of superagent.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Node library for writing HTTP tests against Express-style apps.
From real testing work
Where you meet this in real work: during a sprint, supertest is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. SuperTest is the standard for Node/Express API integration tests.
Exam tip
SuperTest is the standard for Node/Express API integration tests.
Related: rest api testing, api testing
Swagger
A set of tools built around the OpenAPI specification for designing, building, documenting, and consuming REST APIs.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The toolset that grew into OpenAPI — docs, editor, codegen.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Swagger is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Swagger UI is the interactive doc page most APIs expose at /docs or /swagger.
Related: openapi, rest api testing
Synthetic Data
Test data that has been generated to represent characteristics of real data without exposing personal or sensitive information.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Fake but realistic data used in testing so you don't touch real PII.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a synthetic data that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Synthetic data is the GDPR/CCPA-safe answer to 'we need production-like test data'.
Related: test data preparation tool, data masking, test data
Terraform
An open-source infrastructure-as-code tool by HashiCorp for provisioning cloud resources declaratively.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The most popular tool for declaring cloud infrastructure as code.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Terraform shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Terraform state file management and plan/apply flow are common interview topics.
Related: infrastructure as code, pipeline as code, gitops
Test Automation
The use of software to perform or support test activities, e.g. test management, test design, test execution and results checking.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Letting tools do the repetitive parts of testing — usually execution, but also data generation and reporting.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Test Automation is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Automation is an investment, not a silver bullet — know its benefits, risks and success factors in Chapter 6.
Related: test script, continuous testing, regression testing
Test Automation Framework
A collection of assumptions, concepts, values and practices, together with tools, that supports test automation.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The reusable structure around your automated tests: base classes, utilities, reporting, configuration.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Test Automation Framework is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Popular frameworks: Selenium+TestNG, Cypress, Playwright, Robot Framework, Cucumber.
Related: test automation, keyword driven testing, data driven testing
Test Automation Pyramid
A model that recommends a large number of low-level unit tests, fewer service/integration tests, and a small number of UI tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Bulk of tests at unit level, fewer at API level, fewest at UI — cheap, fast, stable.
From real testing work
A résumé-screening model scores candidates from 0 to 1. There is no single expected value to assert against, so test automation pyramid is checked statistically: accuracy on a held-out set, score distribution compared across demographic slices, and an alert when the live distribution drifts from training.
assert accuracy_score(y_true, y_pred) >= 0.87
gap = abs(tpr(group_a) - tpr(group_b))
assert gap < 0.05, f"fairness gap too wide: {gap:.3f}"Exam tip
Same as the test pyramid — Mike Cohn's original name.
Related: test pyramid, unit testing, test automation framework
Test Data Preparation Tool
A tool that enables data to be selected from existing databases or created, generated, manipulated and edited for use in testing.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Software that generates realistic, compliant test data (Faker, Mockaroo, GenRocket).
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a test data preparation tool that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Test data prep tools help with GDPR by producing synthetic data instead of copying production.
Related: test data, synthetic data, data masking
Test Design Tool
A tool that supports the test design activity by generating test inputs from a specification.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Tools that read a model, decision table or classification tree and generate test cases.
From real testing work
A loan-approval rule that depends on income, credit score and existing debt has eight input combinations. Modelling it with test design tool turns an argument in a refinement meeting into a table the BA, the developer and the tester all sign off on, and each row becomes one test case.
Income OK | Score >700 | Debt <40% | Expected
Y | Y | Y | APPROVE
Y | Y | N | REFER
Y | N | Y | REFER
N | - | - | DECLINEExam tip
Pairwise generators (PICT, AllPairs) are the most-used test design tools in practice.
Related: model based testing, pairwise testing, classification tree
Test Double
A generic term for any object that stands in for a real dependency in a test — includes dummies, stubs, spies, mocks, and fakes.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Any stand-in object used in place of a real dependency.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a test double that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Meszaros’ five test doubles — dummy, stub, spy, mock, fake — appear in most senior interview loops.
Related: stub, mock object, fake, dummy, spy
Test Environment Provisioning
The automated creation and configuration of environments required to run tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Spinning up a clean test environment on demand instead of hand-crafting one.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Test Environment Provisioning is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Ephemeral test environments per PR remove 'works on my env' bugs.
Related: infrastructure as code, test environment, ci cd
Test Execution Tool
A tool that enables other software to be tested by automating test scripts, comparing actual results to expected results and reporting.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Selenium, Cypress, Playwright — runs your automated scripts and reports pass/fail.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Test Execution Tool is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
The syllabus calls Selenium & friends 'test execution tools' not 'automation tools'.
Related: test automation, test harness, unit test framework tool
Test Fixture
The fixed state and data required to run a set of tests in a repeatable way.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The setup and data a test needs to run reliably.
From real testing work
Where you meet this in real work: during a sprint, test fixture is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Pytest fixtures and Playwright fixtures are common examples — reusable, composable, scoped.
Exam tip
Pytest fixtures and Playwright fixtures are common examples — reusable, composable, scoped.
Related: setup teardown, test isolation
Test Harness
A test environment comprising stubs and drivers needed to execute a test.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The scaffolding around the code under test — the drivers that call it and the stubs that fake its dependencies.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a test harness that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
Every xUnit framework is a test harness at its core.
Related: driver, stub, unit test framework tool
Test Isolation
The principle that each test should run independently without depending on the order, state, or side effects of other tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Each test stands on its own — no leftover data or order dependency.
From real testing work
After a bad release the team runs a root-cause session and changes the definition of done rather than adding more tests at the end. Test Isolation sits on that side of the fence: preventive and process-oriented, distinct from executing tests against a build.
Exam tip
Poor isolation is the #1 root cause of flakiness in E2E suites.
Related: flaky test, fixture, setup teardown
Test Management Tool
A tool that provides support to the test management and control part of a test process. Manages test cases, test runs and defects.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Zephyr, TestRail, Xray, qTest — where test cases and results live.
From real testing work
A tester files: "Checkout returns HTTP 500 when the cart contains a gift card and a subscription." Steps, expected, actual, environment, build number. Test Management Tool is one of the fields or states in that workflow, and getting the term right is what makes the report actionable for the developer picking it up at 9am.
Exam tip
Modern TMS tools integrate with defect trackers (JIRA) and CI (Jenkins).
Related: test tool, defect management, defect tracking tool
Test Smell
A pattern in test code that suggests a design flaw, such as duplicated setup, mystery guests, or obscure assertions.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A red flag in test code — like duplicate setup or unclear assertions.
From real testing work
Where you meet this in real work: during a sprint, test smell is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Meszaros’ xUnit Test Patterns catalogs the canonical test smells.
Exam tip
Meszaros’ xUnit Test Patterns catalogs the canonical test smells.
Related: flaky test, test isolation, fixture
Test Tool
A software product that supports one or more test activities, such as planning and control, specification, building initial files and data, test execution and test analysis.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Any software that helps a tester — from JIRA to Selenium to JMeter.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Test Tool is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
The syllabus classifies tools by activity: management, static, design, execution, non-functional, performance, DevOps.
Related: test automation, test management tool, static analysis tool
TestComplete
A commercial functional UI test automation tool from SmartBear supporting web, desktop, and mobile applications.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A commercial UI automation tool from SmartBear covering web, desktop, and mobile.
From real testing work
The Android app works perfectly on the team's Pixel and crashes on a three-year-old budget device on a 3G connection. TestComplete is what keeps that from reaching production: a device matrix chosen from real analytics, not from what is on people's desks.
Exam tip
TestComplete is often chosen for legacy desktop apps that Selenium can’t drive.
Related: uft, test automation framework
Testcontainers
A library that provides throwaway, lightweight instances of databases, message brokers, and other services in Docker containers for integration tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A library that spins up real databases/queues in Docker for your integration tests.
From real testing work
A nightly ETL job loads 40 million rows into the reporting warehouse. Testcontainers shows up as the reconciliation step: row counts, checksum comparisons per partition, and null-rate thresholds that fail the pipeline before an analyst builds a dashboard on bad data.
SELECT load_date,
COUNT(*) AS rows_loaded,
SUM(CASE WHEN customer_id IS NULL THEN 1 ELSE 0 END) AS null_keys
FROM warehouse.orders
WHERE load_date = CURRENT_DATE
GROUP BY load_date;Exam tip
Testcontainers is the modern replacement for in-memory H2 fakes — real DB behavior, ephemeral lifetime.
Related: docker, container, integration testing
Testing Honeycomb
A test-distribution model favoring many integration tests, few unit tests, and few E2E tests — advocated by Spotify for microservices.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Mostly integration tests, few unit and E2E — the microservices distribution.
From real testing work
A résumé-screening model scores candidates from 0 to 1. There is no single expected value to assert against, so testing honeycomb is checked statistically: accuracy on a held-out set, score distribution compared across demographic slices, and an alert when the live distribution drifts from training.
assert accuracy_score(y_true, y_pred) >= 0.87
gap = abs(tpr(group_a) - tpr(group_b))
assert gap < 0.05, f"fairness gap too wide: {gap:.3f}"Exam tip
Honeycomb suits microservices where behavior emerges from service interactions.
Related: test pyramid, test trophy, microservices testing
Testing in Production
The practice of validating software behavior in the live production environment using techniques such as feature flags, canary releases and observability.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Push code to real users behind flags, watch metrics and roll back fast if something breaks.
From real testing work
Two weeks before a release the test manager compares planned versus executed cases, open defects by severity, and remaining effort. Testing in Production is where that number comes from — and the exam cares that it is used to inform a decision, not just published.
Exam tip
Shift-right practice; requires strong observability, canaries and feature flags to be safe.
Related: shift right testing, canary release, feature flag
Testing Library
A family of libraries (React, Vue, DOM, etc.) encouraging tests that resemble how users interact with the app.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A library that pushes you to test the app the way a user would use it.
From real testing work
Where you meet this in real work: during a sprint, testing library is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Prefer role-based queries (getByRole) over data-testids for maintainable UI tests.
Exam tip
Prefer role-based queries (getByRole) over data-testids for maintainable UI tests.
Related: jest, unit testing, accessibility testing
TestNG
A Java testing framework inspired by JUnit that adds features such as data providers, parallel execution, groups, and flexible configuration.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Java test framework with more advanced features than classic JUnit.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. TestNG is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
TestNG is preferred for Selenium suites needing data providers, groups, and parallel execution.
Related: junit, unit testing, data driven testing
TestRail
A commercial standalone web-based test case management tool by Gurock.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A standalone commercial test case management platform.
From real testing work
Where you meet this in real work: during a sprint, testrail is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. TestRail is a favorite when teams want a test tool independent of Jira.
Exam tip
TestRail is a favorite when teams want a test tool independent of Jira.
Related: test management tool, defect tracking tool
Tool Adoption
The process of introducing a test tool into an organization, including piloting, roll-out, training and integration into working practices.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
How you get people actually using the tool: pilot, champions, training, integration.
From real testing work
The same discount rule is verified three times: in a unit test on the calculator, in an API test against the pricing service, and once through the UI at checkout. Tool Adoption names one of those layers — different test basis, different owner, different defects found.
// component level
expect(calcDiscount(100, "SAVE10")).toBe(90);
// system level
const res = await api.post("/cart/apply", { code: "SAVE10" });
expect(res.body.total).toBe(90);Exam tip
Adoption failure usually stems from skipping training or ignoring existing workflows.
Related: tool selection, test tool, continuous improvement
Tool Selection
The activity of choosing an appropriate test tool for the organization, based on organizational needs, budget, technology and constraints.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Structured evaluation of test tools against needs, budget, integration, learning curve and vendor viability.
From real testing work
Two weeks before a release the test manager compares planned versus executed cases, open defects by severity, and remaining effort. Tool Selection is where that number comes from — and the exam cares that it is used to inform a decision, not just published.
Exam tip
The syllabus recommends a proof-of-concept before buying — never trust the vendor demo alone.
Related: test tool, proof of concept, tool adoption
Trace Viewer
A Playwright feature that records a step-by-step trace of a test run including DOM snapshots, network, and console for post-mortem debugging.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A debugger that lets you scrub through a failed test like a movie.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Trace Viewer is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Playwright traces are the fastest way to debug flaky CI failures — enable trace on retry.
Related: playwright, flaky test
Tricentis Tosca
A commercial model-based test automation tool from Tricentis for enterprise applications.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A commercial model-based enterprise test automation tool.
From real testing work
A résumé-screening model scores candidates from 0 to 1. There is no single expected value to assert against, so tricentis tosca is checked statistically: accuracy on a held-out set, score distribution compared across demographic slices, and an alert when the live distribution drifts from training.
assert accuracy_score(y_true, y_pred) >= 0.87
gap = abs(tpr(group_a) - tpr(group_b))
assert gap < 0.05, f"fairness gap too wide: {gap:.3f}"Exam tip
Tosca is heavy in SAP, Salesforce, and Oracle enterprise QA.
Related: model based testing, test automation framework
Twelve-Factor App
A methodology for building SaaS applications that are portable, scalable, and easy to deploy across cloud environments.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A checklist of 12 principles for building cloud-native SaaS apps.
From real testing work
Before a Black Friday sale, the team models 5,000 concurrent shoppers against staging. Twelve-Factor App is the part of that exercise that answers a specific question — not "is it fast", but "at what point does it stop being fast, and what breaks first".
// k6 scenario
export const options = {
stages: [
{ duration: "2m", target: 500 },
{ duration: "5m", target: 5000 },
{ duration: "2m", target: 0 },
],
thresholds: { http_req_duration: ["p(95)<800"] },
};Exam tip
Config in env, stateless processes, disposability — commonly quizzed 12-factor points.
Related: ci cd, container, secrets management
UFT (Micro Focus)
A commercial functional test automation tool, formerly known as QuickTest Professional (QTP).
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The classic enterprise GUI automation tool — formerly QTP.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. UFT is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
UFT (formerly QTP) is common in legacy enterprise QA benches.
Related: test automation framework, selenium
Unit Test Framework Tool
A tool that provides an environment for unit or component testing in which a component can be tested in isolation with suitable stubs and drivers.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
JUnit, pytest, NUnit — lets developers run and assert on unit tests.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a unit test framework tool that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
xUnit-family frameworks all provide fixtures, assertions, runners and reports.
Related: unit testing, test harness, stub
Vitest
A modern JavaScript test framework compatible with Vite that offers Jest-like APIs and native ESM support.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Vite-native, Jest-compatible test runner — faster in modern JS setups.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. Vitest is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Vitest is the default choice for new Vite/TS projects.
Related: jest, unit testing
WebDriver
A W3C standard protocol and API for controlling web browsers programmatically, used by Selenium, Appium, and others.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
The standard protocol tools use to drive real browsers.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a webdriver that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
WebDriver is a W3C standard — knowing the protocol layer separates senior automation engineers from beginners.
Related: selenium, appium, page object model
Webhook Testing
Verification of outbound HTTP callbacks sent by a system to notify external services of events, covering delivery, retries, signatures, and idempotency.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Testing outbound event notifications your system sends to third parties.
From real testing work
Where you meet this in real work: during a sprint, webhook testing is the piece of vocabulary a tester reaches for when explaining a decision to a developer or a stakeholder — for example, justifying in a stand-up why a specific check belongs in this build rather than the next. Test signature verification, retry behavior, and idempotency of consumers.
Exam tip
Test signature verification, retry behavior, and idempotency of consumers.
Related: idempotency, api testing, api gateway
WireMock
A library and standalone server for stubbing and mocking HTTP APIs in tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A tool to fake HTTP APIs so tests don’t hit real backends.
From real testing work
The payment gateway sandbox is down for maintenance, but the checkout service still has to be tested. The team wires in a wiremock that returns canned success and decline responses, so the tests exercise their own code instead of a third party's uptime.
vi.mock("./gateway", () => ({
charge: vi.fn(async (amount: number) =>
amount > 5000 ? { status: "declined" } : { status: "approved" }),
}));Exam tip
WireMock supports record/replay, matching, and stateful stubs — essential for integration test isolation.
Related: mock server, service virtualization, stub
XCUITest
Apple’s native UI testing framework built into Xcode for automating iOS apps in Swift or Objective-C.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Apple’s official iOS UI testing framework, part of Xcode.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. XCUITest is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
XCUITest is fastest for iOS-only projects; Appium wraps it for cross-platform scripts.
Related: appium, espresso, mobile testing
XPath
A query language for selecting nodes in an XML or HTML document, widely used for locating elements in web automation.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A syntax for finding elements by traversing the page structure.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. XPath is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
Prefer CSS selectors when possible; use XPath for text matches and axis navigation.
Related: css selector, locator, webdriver
Xray for Jira
A Jira add-on for managing test cases, executions, and requirements traceability directly inside Jira.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A Jira add-on that turns Jira into a full test management tool.
From real testing work
A story reads "As a returning customer I can reuse a saved card." Before estimating it, the three amigos add acceptance criteria for an expired card and a card removed from the account. Xray for Jira is the artefact or link involved, and it is what lets you prove later that every requirement has at least one test.
Exam tip
Xray and Zephyr are the two biggest Jira test-management add-ons.
Related: jira, zephyr, test management tool
xUnit.net
A modern open-source unit testing framework for .NET, designed to encourage best practices.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
A modern .NET test framework used by many ASP.NET Core projects.
From real testing work
The regression pack runs on every merge to main and blocks the deploy when it fails. xUnit.net is the piece of that setup being named here — and the cost is not writing the tests, it is keeping them green when the UI changes next sprint.
- name: Regression suite
run: npx playwright test --grep @regression
- name: Publish report
if: always()
uses: actions/upload-artifact@v4
with: { name: playwright-report, path: playwright-report/ }Exam tip
xUnit.net is the framework recommended by the .NET Foundation.
Related: nunit, mstest, unit testing
Zephyr
A test management tool available as a Jira add-on and standalone product for planning, executing, and reporting tests.
— Official definition, ISTQB® Glossary / CTFL v4.0 syllabus (Chapter 6 – Test Tools). Quoted for study reference; ISTQB® is a registered trademark of the International Software Testing Qualifications Board.
In plain English
Another Jira-integrated test management tool.
From real testing work
Two weeks before a release the test manager compares planned versus executed cases, open defects by severity, and remaining effort. Zephyr is where that number comes from — and the exam cares that it is used to inform a decision, not just published.
Exam tip
Zephyr Scale (formerly TM4J) is common in Jira Cloud enterprise deployments.
Related: jira, xray, test management tool
Test yourself on this chapter
Knowing the terms is not the same as answering under a 60-minute timer. Run the CTFL v4.0 mock test and check your chapter-wise breakdown.