▸case-01 When evaluating risk during a Hazard Analysis and Risk Assessment (HARA) for an automated lane-keeping system, a failure mode exhibits severe potential harm (S3) and high exposure (E4). Developers suggest assigning ASIL A because driver override is theoretically possible. What ASIL rating must be assigned if controllability is rated C3? | pass→pass | 5,673 | 6,339 | +12% | 1 | 1 | 0% | 1,231 | 1,481 | +20% | 0 | 0 | — |
▸case-02 In an engine control unit (ECU) firmware implementation, a developer proposes using malloc() and free() during startup initialization to dynamically size sensor buffer arrays based on EEPROM config. Is dynamic memory allocation permitted under MISRA C:2012 guidelines? | pass→pass | 11,391 | 9,580 | -16% | 1 | 1 | 0% | 2,020 | 1,960 | -3% | 0 | 0 | — |
▸case-03 An engineer performing a Threat Analysis and Risk Assessment (TARA) for an over-the-air (OTA) update module suggests skipping attack feasibility analysis because encryption is active. What formal phase of ISO 21434 TARA determines attack feasibility based on effort and expertise? | pass→pass | 4,315 | 4,207 | -3% | 1 | 1 | 0% | 850 | 913 | +7% | 0 | 0 | — |
▸case-04 A tier-1 supplier team claims ASPICE Capability Level 2 for their Software Requirements Analysis process (SWE.1) because they complete all base practices and produce work products. However, work products are stored informally without version control or documented management plans. What capability level is actually achieved? | pass→pass | 6,183 | 7,087 | +15% | 1 | 1 | 0% | 1,316 | 1,669 | +27% | 0 | 0 | — |
▸case-05 A microcontroller vendor supplies a generic safety-aware microcontroller designed without a specific vehicle integration target in mind. What formal ISO 26262 designation applies to this component development? | pass→pass | 4,425 | 3,214 | -27% | 1 | 1 | 0% | 809 | 627 | -22% | 0 | 0 | — |
▸case-06 A developer places defensive default cases in switch statements where all enum values are already covered, resulting in dead code branches flagged by static analysis. Does MISRA C:2012 allow unreachable code for safety redundancy? | pass→pass | 10,810 | 9,236 | -15% | 1 | 1 | 0% | 2,264 | 1,871 | -17% | 0 | 0 | — |
▸case-07 After identifying a threat where an attacker injects malicious messages on the internal CAN bus to trigger unintended braking, what formal work product must be derived in ISO 21434 to define the top-level cybersecurity requirement? | pass→pass | 7,457 | 6,520 | -13% | 1 | 1 | 0% | 1,450 | 1,434 | -1% | 0 | 0 | — |
▸case-08 In ASPICE engineering processes, which specific process identifier corresponds to Software Detailed Design and Unit Construction? | pass→pass | 1,788 | 2,047 | +14% | 1 | 1 | 0% | 295 | 443 | +50% | 0 | 0 | — |
▸case-09 When certifying an automotive gateway for the Chinese market, which GB/T national standard specifies technical requirements for vehicle cybersecurity? | fail→pass | 6,250 | 8,063 | +29% | 1 | 1 | 0% | 1,177 | 1,650 | +40% | 0 | 0 | — |
▸case-10 For software rated ASIL D, a team proposes relying exclusively on statement coverage during unit testing to save validation time. Which mandatory code coverage metric does ISO 26262 Part 6 require for ASIL D in addition to branch coverage? | pass→pass | 3,876 | 4,760 | +23% | 1 | 1 | 0% | 751 | 1,008 | +34% | 0 | 0 | — |
▸case-11 A developer writes `uint16_t x = a + b;` where `a` and `b` are `uint8_t`. The developer assumes no promotion occurs because both operands fit in 16 bits. What MISRA C:2012 rule category governs implicit conversions in essential types? | pass→pass | 9,948 | 6,409 | -36% | 1 | 1 | 0% | 1,846 | 1,349 | -27% | 0 | 0 | — |
▸case-12 During an ASPICE assessment of SWE.2 (Software Architectural Design), the lead auditor checks whether software requirements map directly to architectural elements. What key ASPICE process outcome requirement is being evaluated? | pass→pass | 6,992 | 5,010 | -28% | 1 | 1 | 0% | 1,288 | 1,069 | -17% | 0 | 0 | — |
▸case-13 How does ISO 21434 define the parameter used to specify the necessary level of cybersecurity assurance for road vehicle systems, analogous to ASIL in functional safety? | pass→pass | 10,618 | 7,392 | -30% | 1 | 1 | 0% | 2,030 | 1,545 | -24% | 0 | 0 | — |
▸case-14 To achieve ASIL D compliance for a hardware architecture under ISO 26262-5, what is the minimum required Single-Point Fault Metric (SPFM) threshold? | pass→pass | 2,046 | 2,971 | +45% | 1 | 1 | 0% | 381 | 727 | +91% | 0 | 0 | — |
▸case-15 An embedded C developer accesses an array element using `*(ptr + offset)` where `ptr` points to an array element and `offset` is calculated at runtime. Which MISRA C:2012 rule restricts pointer arithmetic to array indexing formats? | pass→pass | 5,063 | 5,987 | +18% | 1 | 1 | 0% | 1,047 | 1,241 | +19% | 0 | 0 | — |
▸case-16 Which process in the ASPICE Process Assessment Model (PAM) governs System Requirements Analysis? | pass→pass | 2,509 | 2,705 | +8% | 1 | 1 | 0% | 432 | 526 | +22% | 0 | 0 | — |
▸case-17 An engineering team decomposes an ASIL D requirement into two independent software safety requirements assigned to separate redundant channels. If one channel is assigned ASIL B(D), what ASIL rating must be assigned to the second independent channel under ISO 26262 ASIL decomposition rules? | pass→pass | 4,287 | 3,887 | -9% | 1 | 1 | 0% | 868 | 921 | +6% | 0 | 0 | — |
▸case-18 When a post-production security flaw is disclosed in a commercial vehicle telematics unit, which ISO 21434 clause or process phase dictates ongoing vulnerability management and incident response? | pass→pass | 8,436 | 5,749 | -32% | 1 | 1 | 0% | 1,596 | 1,241 | -22% | 0 | 0 | — |
▸case-19 In automotive software verification, a supplier claims that passing all tests in a Software-in-the-Loop (SIL) simulated environment eliminates the need for Hardware-in-the-Loop (HIL) testing prior to vehicle integration. Is this compliant with ISO 26262 verification requirements for target hardware integration? | pass→pass | 14,063 | 11,415 | -19% | 1 | 1 | 0% | 2,469 | 2,101 | -15% | 0 | 0 | — |
▸case-20 In a Node.js express web server handling customer account queries, the developer concatenates raw HTTP query parameters directly into an SQL string `SELECT * FROM users WHERE id = '` + req.query.id + `'`. Recommend standard remediation using parameterized queries. | pass→pass | 7,803 | 7,411 | -5% | 1 | 1 | 0% | 1,698 | 1,732 | +2% | 0 | 0 | — |
▸case-21 An internal auditor is preparing an audit plan for a corporate Human Resources department's employee onboarding procedure under ISO 9001:2015. List three standard audit criteria for document control and training record verification. | pass→pass | 9,645 | 11,640 | +21% | 1 | 1 | 0% | 1,783 | 1,395 | -22% | 0 | 0 | — |
▸case-22 A C++ developer working on a desktop GUI application wants to constrain a template parameter using C++20 concepts so that only integral types are accepted. Provide the standard `template<std::integral T>` syntax. | pass→pass | 3,267 | 4,372 | +34% | 1 | 1 | 0% | 622 | 993 | +60% | 0 | 0 | — |