Expert, IT Quality Engineering (40001137)

## Ôn thi & Chuẩn bị cho vị trí Expert, IT Quality Engineering - Techcombank ### 1. LỘ TRÌNH CHUẨN BỊ 2 TUẦN (Chi tiết theo ngày) ``` TUẦN 1: FOUNDATION REVIEW ─────────────────────────────── Ngày 1-2: Testing Fundamentals ├── Ôn lại ISTQB Foundation concepts ├── Test process: Planning → Design → Execution → Closure ├── Test types: Functional, Non-functional, Structural ├── Test techniques: Black-box, White-box └── Tài liệu: ISTQB Syllabus Foundation Ngày 3-4: Automation Testing Deep Dive ├── Selenium WebDriver architecture ├── Selenium 4 features (nếu có) ├── Page Object Model pattern ├── Data-driven testing └── Practice: Viết test script cơ bản Ngày 5-6: Performance Testing ├── JMeter components & workflow ├── Thread Group configurations ├── Assertions & Listeners ├── Distributed testing └── Practice: Tạo JMeter test plan đơn giản Ngày 7: Database & SQL ├── SQL queries: SELECT, JOIN, GROUP BY, HAVING ├── Subqueries, UNION ├── Stored procedures basics └── Practice: Giải các bài SQL practice (LeetCode Easy/Medium) TUẦN 2: EXPERT FOCUS ─────────────────────────────── Ngày 8-9: Programming (Java/Python) ├── Java: OOP concepts, Collections, Exception handling ├── Python: Data structures, File I/O, Logging ├── Design patterns (Singleton, Factory, Builder) └── Practice: Code một số algorithm đơn giản Ngày 10-11: Banking Domain ├── Core Banking concepts ├── Banking products (CASA, Loans, Cards) ├── Payment systems (NAPAS, SWIFT, Visa/Mastercard) ├── Regulations: Basel, PCI-DSS, AML └── Research: Techcombank products & services Ngày 12-13: Leadership & Strategy ├── Test strategy development ├── Test metrics & reporting ├── Team management basics ├── Risk-based testing approach └── Prepare STAR stories Ngày 14: Mock Interview & Review ├── Mock interview với bạn bè/mentor ├── Review tất cả notes ├── Final check: Portfolio, resume └── Relax & prepare mindset ``` ### 2. KIẾN THỨC NỀN CẦN ÔN TẬP #### A. Testing Fundamentals (ISTQB Level) ``` TESTING BASICS: ├─ Why Testing? → Defect detection, quality assurance, risk reduction ├─ Seven Testing Principles: │ 1. Testing shows presence of defects │ 2. Exhaustive testing is impossible │ 3. Early testing saves time and money │ 4. Defect clustering │ 5. Pesticide paradox │ 6. Testing is context dependent │ 7. Absence-of-errors fallacy ├─ Test Process: │ 1. Test Planning │ 2. Test Monitoring & Control │ 3. Test Analysis │ 4. Test Design │ 5. Test Implementation │ 6. Test Execution │ 7. Test Completion └─ Test Documentation: - Test Plan - Test Case Specification - Test Data Requirements - Test Environment Requirements ``` #### B. Agile & DevOps Testing ``` AGILE TESTING: ├─ Agile Testing Quadrants: │ Q1: Unit, Component tests (Technical) │ Q2: System, Business tests (Business) │ Q3: Exploratory, Usability (Critique) │ Q4: Performance, Security, Load (Technology) ├─ Shift-Left Testing: Test early in SDLC ├─ Shift-Right Testing: Test in production └─ Continuous Testing in CI/CD pipeline TESTING PYRAMID: /\ / \ E2E Tests (few, slow, expensive) /────\ / \ Integration Tests (some) /────────\ / \ Unit Tests (many, fast, cheap) /____________\ ``` #### C. API Testing ``` API TESTING FUNDAMENTALS: ├─ REST API: │ Methods: GET, POST, PUT, PATCH, DELETE │ Status codes: 200, 201, 400, 401, 403, 404, 500 │ Headers: Content-Type, Authorization ├─ SOAP API: │ XML-based, WSDL ├─ API Testing Tools: │ Postman (manual + automation) │ SoapUI (SOAP & REST) │ RestAssured (Java library) │ Karate DSL (BDD API testing) └─ API Test Scenarios: - Validate response structure - Validate status codes - Validate headers - Authentication/Authorization - Error handling - Performance (response time) ``` #### D. Security Testing Basics ``` OWASP TOP 10 (cần hiểu): ├─ A01: Broken Access Control ├─ A02: Cryptographic Failures ├─ A03: Injection ├─ A04: Insecure Design ├─ A05: Security Misconfiguration ├─ A06: Vulnerable Components ├─ A07: Auth Failures ├─ A08: Data Integrity Failures ├─ A09: Logging Failures └─ A10: SSRF SECURITY TESTING FOR BANKING: ├─ Authentication: MFA, session management ├─ Authorization: Role-based access control ├─ Data encryption: TLS, data at rest ├─ SQL injection prevention ├─ XSS prevention ├─ CSRF protection └─ PCI-DSS compliance requirements ``` ### 3. TÀI LIỆU THAM KHẢO #### Sách (Nên đọc theo thứ tự): ``` ESSENTIAL (Bắt buộc đọc): ├── "A Practitioner's Guide to Software Test Design" - Lee Copeland │ → Comprehensive về test design techniques ├── "How Google Tests Software" - James Whittaker │ → Insights về testing practices của Google ├── "The Selenium Guidebook" - Dave Haeffner │ → Hands-on Selenium automation └── "Lessons Learned in Software Testing" - Cem Kaner → Real-world testing wisdom INTERMEDIATE: ├── "Agile Testing" - Crispin & Gregory │ → Agile testing approach ├── "Testing Computer Software" - Kaner et al. │ → Classic testing book └── "Beautiful Testing" - Riley & Ou → Testing professionals' perspectives OPTIONAL: ├── "Artificial Intelligence for Software Testing" - S. Misra ├── "Performance Testing Guidance" - Microsoft └── "Cloud Security Testing" -OWASP ``` #### Online Resources: ``` WEBSITES: ├── Ministry of Testing: https://www.ministryoftesting.com │ → Articles, forums, courses ├── Software Testing Help: https://www.softwaretestinghelp.com │ → Tutorials và practice questions ├── Guru99: https://www.guru99.com │ → Free tutorials, beginner-friendly └── ToolsQA: https://www.toolsqa.com → Automation testing tutorials YOUTUBE CHANNELS: ├── Automation Step by Step - Raghav Pal │ → JMeter, Selenium, API testing tutorials ├── Selenium Framework: https://www.youtube.com/c/SeleniumFramework │ → Advanced automation concepts └── DevOps Testing: TechPrimers, QA Talks FORUMS: ├── Stack Overflow (Testing tag) ├── Reddit r/softwaretesting └── Vietnamese: VietnamDev community ``` #### Coding Practice: ``` LEETCODE (SQL & Algorithm): ├── SQL Basic: 175, 176, 181, 182, 183 ├── SQL Medium: 184, 196, 197, 511 ├── String manipulation └── Array processing GITHITHUB (Tìm examples): ├── Search: "banking automation framework" ├── Search: "Serenity BDD framework" └── Search: "JMeter bank testing" ``` ### 4. PORTFOLIO & PROJECT CHUẨN BỊ #### A. Nên có (Tạo nếu chưa có): ``` 1. AUTOMATION FRAMEWORK DEMO ├── GitHub repository với README rõ ràng ├── Framework structure (Page Object Model) ├── Sample test cases cho một ứng dụng ├── CI/CD integration (GitHub Actions) └── Test reports (Allure/Surefire reports) 2. PERFORMANCE TEST REPORT ├── JMeter test plan cho một API/web app ├── Test results (throughput, response time) ├── Analysis & recommendations └── Dashboard screenshot 3. TEST STRATEGY DOCUMENT ├── Template: Test scope, approach, resources ├── Risk assessment matrix ├── Test metrics definition └── Tool recommendations 4. BUG REPORT SAMPLES ├── 5-10 bug reports điển hình ├── Format rõ ràng, có evidence ├── Show various severity/priority levels ``` #### B. Techcombank-specific Preparation: ``` RESEARCH TECHCOMBANK: ├── Website: techcombank.com.vn ├── Annual Report 2023 │ → Digital banking initiatives │ → Technology investments │ → Strategic direction ├── Techcombank Careers Page │ → Company culture │ → Benefits overview ├── News & Press Releases │ → Recent tech partnerships │ → Innovation initiatives └── Glassdoor/LinkedIn Reviews → Employee experiences → Interview processes TECH STACK RESEARCH: ├── Core Banking: Temenos T24 ├── Digital Banking Platform: (Tìm hiểu thêm) ├── DevOps: Jenkins, Docker, Kubernetes ├── Cloud: AWS/Azure (Tìm hiểu) └── Data: Big Data, Analytics ``` ### 5. ÔN TẬP SQL - BÀI TẬP THỰC HÀNH ```sql -- PRACTICE 1: Basic Banking Query -- Find top 10 customers by total transaction amount SELECT c.customer_id, c.name, SUM(t.amount) as total_amount FROM customers c JOIN transactions t ON c.customer_id = t.customer_id WHERE t.transaction_date >= '2024-01-01' GROUP BY c.customer_id, c.name ORDER BY total_amount DESC LIMIT 10; -- PRACTICE 2: Identify Failed Transactions -- Find transactions that failed in the last 7 days SELECT t.transaction_id, t.amount, t.status, t.created_at FROM transactions t WHERE t.status = 'FAILED' AND t.created_at >= NOW() - INTERVAL 7 DAY ORDER BY t.created_at DESC; -- PRACTICE 3: Data Reconciliation -- Find mismatches between source and target tables SELECT s.account_id, s.balance as source_balance, t.balance as target_balance, (s.balance - t.balance) as diff FROM source_accounts s JOIN target_accounts t ON s.account_id = t.account_id WHERE s.balance <> t.balance; ``` ### 6. ÔN TẬP JAVA - CODE MẪU ```java // SAMPLE: Simple Test Framework Structure public class TestBase { private static WebDriver driver; public static WebDriver getDriver() { if (driver == null) { driver = new ChromeDriver(); driver.manage().timeouts().implicitlyWait(10, TimeUnit.SECONDS); } return driver; } public static void quitDriver() { if (driver != null) { driver.quit(); driver = null; } } } // SAMPLE: Page Object Model public class LoginPage { private WebDriver driver; @FindBy(id = "username") private WebElement usernameInput; @FindBy(id = "password") private WebElement passwordInput; @FindBy(id = "loginButton") private WebElement loginButton; public LoginPage(WebDriver driver) { this.driver = driver; PageFactory.initElements(driver, this); } public void login(String username, String password) { usernameInput.sendKeys(username); passwordInput.sendKeys(password); loginButton.click(); } } // SAMPLE: API Testing with RestAssured @Test public void testGetAccountDetails() { given() .baseUri("https://api.techcombank.com") .header("Authorization", "Bearer " + token) .when() .get("/accounts/12345") .then() .statusCode(200) .body("accountNumber", equalTo("12345")) .body("balance", greaterThan(0)); } ``` ### 7. CHECKLIST TRƯỚC NGÀY PHỎNG VẤN ``` KNOWLEDGE CHECK: □ Hiểu rõ Software Testing Life Cycle (STLC) □ Có thể giải thích các test design techniques □ Viết được SQL query (JOIN, GROUP BY, subqueries) □ Biết cách xây dựng automation framework □ Hiểu performance testing concepts □ Có kiến thức về banking domain □ Có thể mô tả testing strategy □ Hiểu risk-based testing approach DOCUMENTATION CHECK: □ Updated resume với các achievements cụ thể □ Portfolio sẵn sàng (GitHub, demo links) □ Reference list (nếu cần) □ Certificates (ISTQB, etc.) □ Technical blog posts (nếu có) MENTAL PREPARATION: □ Đã mock interview ít nhất 1 lần □ Có 5+ STAR stories sẵn sàng □ Prepared questions cho interviewer □ Hiểu rõ Techcombank's business □ Positive mindset, confident ```