Practice real QA interview scenarios

Login form

Abuse prevention, permissions, and sensitive data

Test a production login page with validation, account states, sessions, and security risks.

Search and filters

UI behavior, validation, and accessibility

Test catalog search with filters, sorting, pagination, URL state, and empty results.

Create user API

API contracts, auth, and backend failure modes

Test a user creation endpoint with validation, authorization, contracts, events, and race conditions.

Auth token refresh API

API contracts, auth, and backend failure modes

Test token refresh behavior, rotation, expiry, revocation, and client retry risks.

Push notifications

Mobile states, lifecycle, and device behavior

Test opt-in, delivery, deep links, permissions, quiet hours, and device states.

App offline mode

Mobile states, lifecycle, and device behavior

Test mobile behavior when connectivity is lost, restored, or unstable.

Soft delete behavior

Persistence, consistency, and reporting confidence

Test record lifecycle, visibility, restore behavior, and uniqueness with soft deletes.

Audit log records

Persistence, consistency, and reporting confidence

Test audit records for completeness, immutability, ordering, and sensitive data handling.

File upload with virus scan

UI behavior, validation, and accessibility

Test file upload with signed URLs, scan pending states, validation, retry, and quarantine.

Offline sync conflict

Mobile states, lifecycle, and device behavior

Test conflict detection and resolution when offline edits meet server changes.

How would you test a payment checkout?

End-to-end flow, recovery, and business risk

Practice an interview-style answer for checkout risk analysis across UI, payments, backend, and recovery.

How would you test a password reset flow?

Abuse prevention, permissions, and sensitive data

Practice an interview answer for account recovery, token security, UX, and abuse prevention.

How would you test a login page?

Abuse prevention, permissions, and sensitive data

Practice a classic login interview answer with sessions, account states, security, and accessibility.

How would you test user registration?

Persistence, consistency, and reporting confidence

Design coverage for account creation, verification, duplicate data, validation, and onboarding.

How would you test a search feature?

UI behavior, validation, and accessibility

Practice search coverage across relevance, empty states, special characters, ranking, and performance.

How would you test filters and sorting?

UI behavior, validation, and accessibility

Cover filter combinations, sorting rules, URL state, invalid ranges, and large result sets.

How would you test file upload?

Abuse prevention, permissions, and sensitive data

Practice file upload coverage with type, size, async scanning, retries, previews, and security.

How would you test notifications?

UI behavior, validation, and accessibility

Cover in-app, email, and preference-driven notifications with delivery, content, and failure modes.

How would you test user roles and permissions?

Abuse prevention, permissions, and sensitive data

Practice authorization coverage for roles, permission boundaries, UI hiding, and backend enforcement.

How would you test a shopping cart?

End-to-end flow, recovery, and business risk

Cover cart state, pricing, inventory, discounts, persistence, and checkout handoff.

How would you test payment checkout failure and recovery?

Persistence, consistency, and reporting confidence

An advanced checkout variant focused on payment failures, idempotency, recovery, and data consistency.

How would you test password reset abuse and token security?

Abuse prevention, permissions, and sensitive data

An advanced password reset variant focused on token safety, enumeration, abuse limits, and session cleanup.

How would you test a mobile app offline mode?

Mobile states, lifecycle, and device behavior

Cover offline reads, queued writes, sync recovery, conflicts, cache freshness, and mobile UX.

How would you test push notifications?

Mobile states, lifecycle, and device behavior

Practice mobile push coverage with permissions, device states, deep links, preferences, and delivery reliability.

How would you test an import from Excel/CSV?

UI behavior, validation, and accessibility

Cover file parsing, validation, row-level errors, duplicates, rollback, mapping, and performance.

How would you test a report/dashboard page?

Abuse prevention, permissions, and sensitive data

Practice dashboard coverage across metrics, filters, permissions, exports, freshness, and performance.

How would you test multi-device data sync?

Persistence, consistency, and reporting confidence

Cover sync across devices, conflict resolution, stale cache, ordering, and data integrity.

Create user API contract and validation

API contracts, auth, and backend failure modes

Test a production-style user creation endpoint with validation, uniqueness, permissions, and auditability.

Login/auth API

API contracts, auth, and backend failure modes

Test authentication API behavior including tokens, errors, lockout, sessions, and security headers.

Token refresh API

API contracts, auth, and backend failure modes

Test refresh token rotation, expiry, replay detection, revocation, and session continuity.

Pagination API

API contracts, auth, and backend failure modes

Test page, page size, sorting, metadata, boundaries, and stable pagination behavior.

Search API

API contracts, auth, and backend failure modes

Test API search behavior with relevance, query validation, filters, highlighting, and performance.

File upload API

API contracts, auth, and backend failure modes

Test upload endpoint contracts with multipart data, limits, scan states, retries, and secure file handling.

Permissions/roles API

API contracts, auth, and backend failure modes

Test role assignment and authorization APIs with permission boundaries, audit, and race conditions.

Bulk import API

API contracts, auth, and backend failure modes

Test a bulk import API for validation, row errors, duplicate handling, rollback, and async job status.

The Internet - Common web elements testing

UI behavior, validation, and accessibility

The Internet

Practice foundational UI checks against common web widgets and interaction patterns.

Practice Test Automation - Login and table basics

UI behavior, validation, and accessibility

Practice Test Automation

Design beginner tests for login behavior, simple tables, and stable UI locators.

Sauce Demo - E-commerce checkout flow

End-to-end flow, recovery, and business risk

Sauce Demo

Explore login users, product listing, cart behavior, checkout totals, and completion risks.

Automation Exercise - End-to-end e-commerce flow

End-to-end flow, recovery, and business risk

Automation Exercise

Practice full e-commerce coverage across account, catalog, cart, checkout, and contact flows.

ParaBank - Online banking exploration

Persistence, consistency, and reporting confidence

ParaBank

Explore banking registration, sessions, transfers, bill pay, history, and financial data consistency.

XYZ Bank - Banking roles and transactions

Abuse prevention, permissions, and sensitive data

XYZ Bank

Test customer and manager banking roles, deposits, withdrawals, accounts, and transaction records.

JSONPlaceholder - REST API basics

API contracts, auth, and backend failure modes

JSONPlaceholder

Practice REST API status, schema, CRUD-style behavior, and negative endpoint thinking.

Restful Booker - Booking API test design

API contracts, auth, and backend failure modes

Restful Booker

Design booking API tests for auth, CRUD, schemas, dates, and negative payloads.

UI Test Automation Playground - Dynamic UI automation risks

UI behavior, validation, and accessibility

UI Test Automation Playground

Analyze dynamic UI behaviors that create flaky manual checks and automation tests.

Tricentis Obstacle Course - Automation obstacle analysis

UI behavior, validation, and accessibility

Tricentis Obstacle Course

Inspect automation obstacles and translate them into practical QA risk coverage.

OWASP Juice Shop - Broken access control and input security

Abuse prevention, permissions, and sensitive data

OWASP Juice Shop

Practice safe security-focused QA thinking around auth, input validation, and access control.

Google Gruyere - Web security exploration

Abuse prevention, permissions, and sensitive data

Google Gruyere

Use an educational vulnerable app to build safe security test design habits.

Accessibility Tool Audit - Accessibility issue discovery

UI behavior, validation, and accessibility

Accessibility Tool Audit

Practice finding accessibility issues and comparing what tools catch versus manual review.

Before and After Demonstration - Compare inaccessible and accessible flows

End-to-end flow, recovery, and business risk

Before and After Demonstration

Compare inaccessible and improved versions of the same pages to learn practical accessibility risk.

Blaze Demo - Travel booking performance scenario

UI behavior, validation, and accessibility

Blaze Demo

Design performance-focused tests for a travel booking search and purchase journey.

The k6 Fake eShop - E-commerce performance test design

UI behavior, validation, and accessibility

The k6 Fake eShop

Practice performance test design for an e-commerce journey and service bottlenecks.

Black Box Puzzles - Exploratory testing puzzle

UI behavior, validation, and accessibility

Black Box Puzzles

Use puzzle-like systems to practice observation, hypothesis, note-taking, and test idea generation.

Testing Challenges - Test idea generation challenge

UI behavior, validation, and accessibility

Testing Challenges

Practice creating focused test ideas from small product puzzles and ambiguous prompts.