NEW
Font size
WorksheetsSystem Developement
Total questions: 39
Worksheet time: 39mins
Business application system/software is designed to support a specific organisational service, function or process, such as inventory management, payroll, market analysis or e-commerce. What is the goal of such a business application?
To enhance the targets and goals of an organisation
To deal with problems relating to business processes
To enhance quality of services
To turn data into information
What is the intent of SDLC?
To process data of relevant business processes
To enhance the targets and goals of an organisation
To improve the quality of services
To examine a business situation and improve it
Which of the following is the role of an IS Auditor in Phase 3 (System Analysis) of SDLC?
Review cost justification/ benefits
Review detailed requirement definition documents
Verify that the management has approved the initiation and cost of the project
Review existing data flow diagrams and other related specifications
Which of the following is the role of an IS Auditor in the detailed design phase of SDLC?
Analyse the justification for going in for a development or acquisition
Review input, processing and output controls
Ensure that the documentation is complete
Review QA report on adopting coding standards by developers
What are the characteristics of a very well coded application program?
Good coding standards, Accuracy and Speed
Reliability, Robustness, Accuracy, Efficiency, Usability, Readability
Flexibility, Speed, Coding Standards
Reliability, Flexibility and Speed
What is the role of an IS Auditor in the testing phase of SDLC?
Review the test plan for completeness and correctness
Ensure test plans, test data nd test results are maintained for reference
Verify that the system has been installed according to the organisation’s change control procedures.
Review programmed procedure used for scheduling and running the system along with the system parameters are used in executing the production schedule
What are the security steps involved in the development phase of SDLC?
To identify possible attacks and design controls
To train developers on security coding practices
To ensure security requirements are tested during testing
To perform security scan of application after implementation
Which of the following is a mitigation plan for risk associated with compromising on quality and testing?
Understand organisation baseline for infrastructure and incorporate in design.
Ensure standard coding practices are adopted.
Ensure completion of documentation along with design and development.
Ensure documentation experts and technical writers are part of team.
What is the mitigation plan for risk associated with absence of skilled resources?
Consider outsourcing or hiring skilled resources on contract
Develop and implement standard coding practices
Perform scope base lining.
Introduce change management process to evaluate and adopt changes in requirements
Who is responsible for delivery of a project within the time and budget?
Module/Team leader
System Analyst
Project Manager
Database Administrator
Which of the following is the role of a programmer?
Approve, supervise and direct IT projects
Convert design into programs by coding
Checking compliance with SDLC standards
Testing programs and sub programs
The technical feasibility study for automating a business process using information technology includes which of the following?
Is the cost of hardware and software for the class of applications being considered.
Are the benefits derived from new application such as improved efficiency, reduced costs, business growth, and customer and user satisfaction.
Is the cost of conducting a full systems development/acquisition, implementation and operation.
Is system scalable and can it handle the expected business and data growth?
The business case is a KEY element of the decision making process throughout the life cycle of project. What information does a business case provide to an organisation?
decide whether the SDLC project should be undertaken
Explore solutions and make a recommendation
Develop a new application system
Outline and calculate of benefits
What does study of history, structure and culture of information involve?
Identifying stakeholder expectations
Types of useful systems, issues that have not been addressed and require attention
Identifying how the system needs to interact with its environment
Study of business processes, underlying activities, and actors that perform these activities
What is important to record requirements after they have been analysed. Under which phase of requirement Engineering does this fall?
Elicitation
Analysis and Negotiation
Documentation
Validation
Which aspect related to Project Planning does process of handing over deliverables come under?
Project execution
Project execution
Project monitoring and controlling
Project closing
What does Work Breakdown Structure (WBS) represent?
The project in terms of manageable and controllable units of work
Detailed specifications with objectives
Assigned responsibilities and deadlines
Work documents containing the start and finish dates
Half way through a project development, on which phase should an IS auditor focus in order to ensure that there is no deviation from the primary objectives of the projects?
Project Planning
Project Controlling
Resource Management
Risk Management
What is the tool used to verify that deployed resources are capable of finishing a task within the set time limit and with the expected quality level?
Earned value analysis
Work Breakdown structure
Work Package
Qualitative Analysis of Risks
During risk management process, how is risk assessed and evaluated?
Creating an inventory of possible risk
Quantify the likelihood and impact of risk
Create a risk management plan
Discover risk that materializes
Which of the following is the feature of a waterfall model?
The designers create an initial base model and give little or no consideration to internal controls, but instead emphasize system characteristics such as simplicity, flexibility, and ease of use.
Project is divided into sequential phases, with some overlap and splash back acceptable between phases.
This is an iterative model where each iteration helps in optimizing the intended solution.
This model of development helps to ease the traumatic effect of introducing completely new system all at once
In this model, a series of mini-waterfalls are performed, where all phases of the waterfall development model are completed for a small part of the system, before proceeding to the next increment. What SDLC model is this?
Waterfall model
Prototype model
Spiral model
Incremental model
This model is especially useful for resolving unclear objectives and requirements; developing and validating user requirements; experimenting with or comparing various design solutions, or investigating both performance and the human computer interface.
Waterfall model
Prototyping model
Spiral Model
Incremental model
Which of the following is a weakness of the spiral model?
It is criticized to be Inflexible, slow, costly, and cumbersome due to significant structure and tight controls.
Approval process and control are not formal.
Sometimes there are no firm deadlines, cycles continue till requirements are clearly identified.
Problems may arise pertaining to system architecture because not all requirements are gathered up front for the entire software life cycle.
Which of the following is a KEY feature of Rapid Application Development?
fast development and delivery of a high quality system at a relatively low investment cost,
Use of small, time-boxed subprojects or iterations where each iteration forms basis for planning next iteration.
Customer satisfaction by rapid delivery of useful software
Welcome changing requirements, even late in development;
Which of the following is the weakness of the Agile Software development methodology?
Fast speed and lower cost may affect adversely the system quality.
The project may end up with more requirements than needed (gold-plating).
Potential for feature creep where more and more features are added to the system during development.
There is lack of emphasis on necessary designing and documentation due to time management and generally is left out or incomplete.
This is the process of studying and analyzing an application, a software application or a product to see how it functions and to use that information to develop a similar system.
Software Reengineering
Reverse Engineering
Agile processes
Rapid Application Development
How is a product for which software is available and can be implemented without customisation classified as?
Generic products without customisation
Commercial product with customisation
Outsourced development
Commercial product without customisation
In achieving the objectives of requirement analysis, the process of understanding the present system and its related problems comes under which of the following steps?
Fact finding
Analysis
Requirements of proposed systems
Identifying rationale and objectives
The process of allotting weight-age for each requirement and then allotting score to the software that meets that requirement is called as:
Point scoring Analysis
Agenda based presentations
Public evaluation reports
Benchmarking solutions
While preparing the request for proposal, what should an organisation do to ensure vendor viability and financial stability?
Compare product functionalities against requirements
Validate vendor claims about their product performance
Get feedback from existing customers of the vendor on supporting documents of the vendor
Evaluate what king of support the vendor provides
Out of the tests performed on a program unit, what does a performance test check?
whether programs do, what they are supposed to do or not
verify the expected performance criteria of program
determines the stability of a given system or entity
examines the internal processing logic of a software system
Which of the following is a feature of top down integration?
The testing will start from opening login screen and then login, then selecting function one by one
It is the traditional strategy used to integrate the components of a software system starting from smallest module/function/program.
It consists of unit testing, followed by sub-system testing
Bottom-up testing is easy to implement as at the time of module testing, tested subordinate modules are available.
With respect to System testing, what is the objective of performance testing?
To assess how well the application is able to recover from crashes, hardware failures and other similar problems
To determine that an Information System protects data and maintains functionality as intended
to determine the stability of a given system or entity based on the requirements
to assess various parameters like response time, speed of processing, effectiveness use of a resources (RAM, CPU etc.), network, etc.
What does User Acceptance Testing focus on?
Ensuring that the system is production-ready and satisfies all accepted (baselined) requirements
Conforming to the quality standards of the organisation accepted before development
Documenting specifications, technology employed, use of coding standards
Controlling the execution of tests and the comparing of actual outcomes with predicted outcomes
In this strategy, implementation can be staged with conversion to the new system taking place gradually
Phased Changeover
Abrupt Changeover
Pilot Changeover
Parallel Changeover
Which of the following is a requirement to be considered with respect to cloud computing and sourcing options?
The development team needs to define backup procedures
Client needs to be tested for all known browsers
Evaluation of vendors for acquisition of tools and software
Developers to test their code before releasing to testing team
Which of the following is a risk with respect to security of big data?
When an employee leaves the company, data may still be present on their employees’ device
Requires data to be stored in denormalized form i.e. schema-less in distributed environments
Propagation of malware resulting in data leakage, data corruption and non-availability of required data
Possibility of fraud through remote access and inability to prevent/detect it.
Which of the following is the role of an IS Auditor during post implementation review?
suggest appropriate controls to be included in proposed solution
Interview project team and stakeholders to understand expectations
Ensure ‘what project control standards are to be complied with
Evaluation of system for information security and privacy controls
