Become a QA engineer · Part 4
Test Execution & Defect Management.
You have designed the cases. Now the build lands and the real work starts: you run the tests, you find the defects, and you drive each one to closed. This is the part of testing people picture and describe the most vaguely, and it is where a careful tester earns the team's trust. I will show you how I run a cycle and manage what it turns up, the same way I taught it in my bootcamp, and it is free.
This is part of a 4-part path:Part 1 Become a QA Engineer,Part 2 Test Design & Strategy,Part 3 How QA Fits Into Any System,Part 4 Test Execution & Defect Management (you are here).
Prefer to watch and click through?
The slide lesson
The whole Part 4 course as an illustrated, interactive deck: run the build honestly, report what failed, manage defects to closure, then make the release call with evidence.
New here? Do Part 2 first
Test Design & Strategy
This course builds on the test design you learned in Part 2. It assumes you can already write a test case, a plan, and tell severity from priority. If any of that is hazy, do Part 2 first. It is free and it sets up everything here.
The path
From a fresh build to a go or no-go call, in order
Nine modules that follow the real flow of a cycle: execute, find, report, then manage each defect to closed. Tick each one off as you go, and your progress saves in this browser.
What test execution really is
Execution is the part people picture when they imagine testing, and the part they describe the most vaguely. It is not clicking around until something breaks. It is running known cases against a known build and recording what actually happened, so the team can make a decision.
- Why execution is the moment your test design either pays off or falls apart
- Entry criteria as a checklist you actually run: testable build, approved requirements, test data ready, environment up, cases reviewed
- Exit criteria as the line that ends a cycle: cases run, coverage met, no open critical or high-severity defects
A cycle that starts before it is ready, or ends because someone got tired, is where quality quietly leaks out.
Run a real test run, status by status
A test run is how you turn a pile of cases into information someone can act on. You execute each case against one build, in one environment, and you mark a status that means the same thing to everyone reading it.
- The statuses and what each one promises: Passed, Failed, Blocked, Skipped, Retest, Untested
- The four environments and what is true in each: development, testing, staging, production
- Naming a run so the result is unambiguous later (Regression : v1.0 : Chrome : Staging), and capturing evidence on every failure
Blocked is not Failed, and Skipped is not Passed. Mark them wrong and your run lies to the people trusting it.
Find the defect, then name what kind it is
A failing case tells you something is wrong. Your job is to see exactly what, and to classify it so the team understands the shape of the problem at a glance. Most defects fall into a handful of recognisable categories, and naming the category is half the diagnosis.
- The defect categories that come up again and again: functional, control flow, calculation, error handling, performance, communication, missing command, and visual
- Reading a screen like a tester: the failure you were sent to find, and the two next to it you were not
- Telling a real defect from a misread requirement before you file anything
A bug filed under the right category is a bug a developer can start reasoning about before they read a single step.
Write the report that gets fixed first time
A bug nobody can reproduce never gets fixed. A clear report answers one question completely, which is how do I see this for myself, and it carries severity and priority that mean two different things. This is the most visible thing you produce, so build it in the tool that scores it as you go.
- The parts every report carries: a specific title, environment, numbered steps from a known state, expected versus actual, and evidence
- Severity is impact, priority is urgency, and you state both. The tester usually owns severity, the product owner owns priority
- Reproducibility as its own field: Always and one in twenty send a developer down completely different paths
Getting a bug fixed is where the time goes, and most of that time is wasted on bugs that were reported badly.
The defect lifecycle: where a bug goes after you file it
Filing the report is the start, not the end. Every defect moves through a lifecycle, and at each step someone specific owns the next move. Knowing the states, and who owns each transition, is what stops bugs from dying silently in a backlog.
- The states a defect moves through: New, Triaged, In Progress, Ready for Retest, Closed, and back to Reopened
- The endings that are not Closed, and when each is honest: Deferred, Duplicate, Rejected, and Cannot Reproduce
- Retesting a fix properly, and the regression check around it, before you let anything close
You do not own the bug, but you have a say on it, and you make sure that say is heard until it is genuinely resolved.
Triage like a lead, not a list
A backlog of open bugs is not a to-do list you work top to bottom. Triage is the skill of ordering it by risk, so the right bugs get fixed first instead of whatever is loudest or newest. This is the line between a tester and someone the team trusts with a release.
- The severity by priority matrix, and why the corners (high severity, low priority and the reverse) are the interesting ones
- Risk-ordering a backlog: impact, likelihood, and what protects core functionality first
- Running, or surviving, a triage meeting: what to bring, what to defer, and how to hold a line on a critical bug
Ship the wrong fix order and you either delay the release or ship something low quality. Both land on you.
Defect metrics that matter, and the ones that mislead
Numbers from your runs and your defects are how you tell the quality story to people who were not in the room. Used well they guide the team. Used badly they become a target someone games, and the number gets better while the product gets worse.
- The honest ones: defect leakage (what escaped to production), reopen rate, defect age, and defect removal efficiency
- Why a raw bug count is almost always the wrong headline, and what to show instead
- Reading severity and priority spread across a release to answer the only question that matters: can we ship?
A metric becomes a lie the moment it becomes a target. Know which numbers help, and which ones just look busy.
Test closure and the go or no-go call
A cycle ends with a decision, and a tester is the person best placed to inform it. Closure is checking every planned case was run or consciously skipped, every known bug is fixed or accepted, and writing the one summary the people deciding will actually read.
- Closure activities: confirming cases ran, fixes were retested, and known bugs are resolved, deferred, or documented as limitations
- The test summary report that earns trust: what shipped, what is open, the risk, and your recommendation in one place
- Handover that does not drop anything: passing open bugs, environments, and known limitations to the people who own them next
A good idea is not a reason to ship. The call is whether it works and whether the risk is one the team can carry.
Execution and defect management in the AI era
AI is genuinely useful in this phase, and it is useful in specific places, not as a wand you wave over the whole run. Hand it the work it is good at, the reading and the drafting and the combing through, and keep the judgment, the risk call, and the decision to ship for yourself.
- Where AI helps: turning a screen recording into draft repro steps, a wall of logs into the failing request, and a noisy backlog into clustered duplicates
- Where the human is non-negotiable: seeing a UI is visually wrong, judging real risk, the triage call, and whether the build is good enough to ship
- Doing it honestly: AI drafts the report and the summary, then you review, correct, and own every word with your name on it
AI drafts the obvious fast. Deciding what matters, and standing behind the go or no-go, is still you.
The hands-on loop
Run it, report it, resolve it
Three tools that model the whole cycle. Execute a run, write the report on what fails, then drive the defect through its lifecycle. Reading about this is not the same as doing it.
Test Run Simulator
Execute a suite against a live mock store. Mark each case Passed, Failed, Blocked or Skipped, and capture evidence as you go.
Bug Report builder
Turn a failed case into a report a developer can act on first time, scored live against what reviewers actually look for.
Defect Triage board
Drag each bug through its lifecycle, set severity against priority, and watch the metrics that matter move as you go.
Practice & play
Management is a doing skill
You will not learn the defect lifecycle or which metrics mislead by reading them once. Test yourself, because that is how it actually sticks.
Knowledge check
Score 0 / 71During a run, a case cannot be executed because the feature it depends on is broken. The correct status is:
Blocked means something is in the way and the case cannot run yet. Failed would wrongly claim you ran it and the product misbehaved, which sends a developer chasing the wrong problem.
2A typo on the homepage headline is best described as:
It barely breaks anything, so low severity, but it is highly visible and embarrassing, so high priority. Severity and priority are different axes, and the interesting bugs live in the corners.
3A developer marks a defect as fixed. Before it can move to Closed, you should:
A fix is a claim until you verify it. Retest the exact case, then check around it for regressions, because fixes are a common place new bugs are introduced.
4Which defect ending is honest for a real, reproducible bug the team has chosen not to fix this release?
Deferred records that the bug is real and acknowledged, just consciously not scheduled now. Rejected and Cannot Reproduce would misrepresent it, and the team loses the record.
5Your team wants one number to prove testing is working. The most misleading choice is:
A raw bug count rewards noise and punishes a clean build. Leakage, reopen rate and removal efficiency speak to whether the right bugs were caught and fixed well.
6What is the safest place to let AI do the work during defect management?
AI is strong at reading recordings and logs into a first draft. The risk call, the visual judgement, and the decision to ship stay with you, because those are not reliably replicated yet.
7A test cycle is running low on time with several cases still untested. The professional move is:
When time is short, risk decides order. Run the cases that protect core functionality first, and report honestly on what was not reached, rather than faking a green run.
Flashcards (tap to flip)
Known 0 / 14Running known test cases against a known build and recording what actually happened.
The conditions that must be true before a test cycle can sensibly start.
The conditions that decide a test cycle is genuinely done, not just out of time.
A set of cases executed against one build in one environment, each with a recorded status.
A status meaning a case cannot be executed right now because something is in the way. Not the same as Failed.
How badly a defect breaks the product. The tester usually owns this call.
How urgently a defect should be fixed relative to everything else. The product owner usually owns this.
The states a bug moves through from New to Closed, with an owner for each transition.
A defect that was marked fixed but failed retest, sent back to the developer.
A real defect the team has consciously decided not to fix in this release.
Ordering a backlog of defects by risk so the right ones get fixed first.
Defects that escaped your testing and were found in production. A measure of what you missed.
The share of fixed defects that failed retest and reopened. A signal of fix quality.
Confirming the cycle is complete and writing the summary that informs the go or no-go call.
Match the term to its meaning
0 / 6 matchedClick a term, then click its meaning. Get all six to clear the round.
Fill in the missing word
Go further
Where to deepen this
Start with mine. After that, here is an honest shortlist for going deeper on execution and defect management.
From me
Trusted elsewhere
You have finished the track
Track the whole journey on the QA Career Roadmap
All four parts take you from curious to job-ready. The roadmap is what comes next: seven stages with saved progress, from your first manual test to AI-augmented automation and leading a team.
Stuck on a defect call?
Knowing whether to block a release or let a bug go is a judgement that grows with reps. Reach out on LinkedIn, or send me a message and tell me what you are weighing up.
Field Notes
Build better products
by testing what matters.
Get practical notes on testing, automation, AI, mobile apps, and release decisions. I share the workflows, lessons, tools, and mistakes from real product work so you can ship with more confidence and fewer last-minute surprises.
