Role preparation
QA Engineer interview questions and answers.
Test design, risk analysis, and release confidence.
Questions
Technical questions to practise out loud
- 01
What is the difference between bug severity and priority?
Severity measures technical and user impact; priority expresses business urgency and repair order. A severe edge-case bug may be lower priority than a moderate defect blocking today's major customer or release.
Read the full breakdown - 02
How would you test an order creation API?
Test the happy contract plus validation, authentication, authorization, totals, stock, idempotency, duplicates, concurrency, dependency failures, transaction rollback, status and error schemas, persistence, events, performance and audit effects.
Read the full breakdown - 03
What makes a high-quality bug report?
A strong bug report has a precise title, environment and build, minimal reproducible steps, expected and actual behavior, frequency and impact, evidence such as logs or video, relevant data, and no unsupported diagnosis.
Read the full breakdown - 04
How do you use the test pyramid?
Keep most checks fast and close to logic, fewer integration tests at real boundaries, and a small end-to-end layer for critical journeys. The exact shape follows risk, but feedback should remain fast and failures attributable.
Read the full breakdown - 05
How do you prioritise testing by risk?
Score features by likelihood of failure and impact on users, revenue, safety, compliance and recoverability; add change complexity and defect history, then spend depth and environments where residual risk is highest.
Read the full breakdown - 06
How do you run exploratory testing?
Run exploratory testing with a time-boxed charter, risk hypothesis, representative data and environment; vary inputs and sequences, record observations and coverage, capture reproducible defects, then debrief and update future checks.
Read the full breakdown - 07
How do you maintain a regression suite?
Keep tests that protect current high-risk behavior, remove duplicates and obsolete cases, assign ownership, classify failures, track runtime and flakiness, review after incidents and features, and balance each case at the cheapest reliable layer.
Read the full breakdown - 08
How do you manage test data?
Create minimal deterministic data through supported APIs or fixtures, isolate it per test and worker, avoid copied personal data, mask production-like samples, control clocks and identities, and clean up or use disposable environments.
Read the full breakdown - 09
How do you define release criteria?
Release criteria combine required functional checks, unresolved defect risk, security and compliance gates, performance and reliability thresholds, observability readiness, migration and rollback evidence, stakeholder acceptance and explicit exceptions.
Read the full breakdown - 10
What quality metrics do you use?
Use outcome and flow metrics such as escaped defects by impact, change failure rate, time to detect and recover, flaky-test rate, coverage of critical risks and customer failure rate; avoid raw test counts as quality.
Read the full breakdown