WorksheetsIS 385 Final
Total questions: 52
Worksheet time: 30mins
System sequence diagrams (SSDs) show the inputs and outputs for each use case as ______
messages
details
sequences
models
A UML sequence diagram usually used for _____ use cases
Simple
Complex
Normal
In the SSD diagram,
[true/false condition] return-value := message-name (parameter-list)
an asterisk (*) indicates _____
repeating or looping of the message
true/false condition
description of the requested service written as a verb-noun
show the data that are passed with the message
In the SSD diagram,
[true/false condition] return-value := message-name (parameter-list)
Brackets [] indicates _____
repeating or looping of the message
true/false condition
description of the requested service written as a verb-noun
show the data that are passed with the message
In the SSD diagram,
[true/false condition] return-value := message-name (parameter-list)
"message-name" indicates _____
repeating or looping of the message
true/false condition
description of the requested service written as a verb-noun
show the data that are passed with the message
In the SSD diagram,
[true/false condition] return-value := message-name (parameter-list)
"parameter-list" indicates _____
repeating or looping of the message
true/false condition
description of the requested service written as a verb-noun
show the data that are passed with the message
In the SSD diagram,
[true/false condition] return-value := message-name (parameter-list)
"return-value" indicates _____
repeating or looping of the message
true/false condition
description of the requested service written as a verb-noun
describe data being returned from the destination object to the source object in response to the message
First step for developing SSD
Identify input message
Describe the message from the external actor to the system using the message notation
Identify any special conditions on input messages
Identify and add output return values
Second step for developing SSD
Identify input message
Describe the message from the external actor to the system using the message notation
Identify any special conditions on input messages
Identify and add output return values
The third step for developing SSD
Identify input message
Describe the message from the external actor to the system using the message notation
Identify any special conditions on input messages
Identify and add output return values
The fourth step for developing SSD
Identify input message
Describe the message from the external actor to the system using the message notation
Identify any special conditions on input messages
Identify and add output return values
CRUD technique stands for
Create
Read/report
Update
Delete
The first step of CRUD Analysis
Identify all domain classes
Verify use cases
Add new use cases as required. Identify responsible stakeholders
Identify which application has responsibility for each action: which to create, which to update, which to use
The second step of CRUD Analysis is to verify that use cases exist to:
Create a new instance
Update existing instances
Reads or reports on information in the class
Deletes or archives inactive instances
The third step of CRUD Analysis
Identify all domain classes
Verify use cases
Add new use cases as required. Identify responsible stakeholders
Identify which application has responsibility for each action: which to create, which to update, which to use
The fourth step of CRUD Analysis
Identify all domain classes
Verify use cases
Add new use cases as required. Identify responsible stakeholders
Identify which application has responsibility for each action: which to create, which to update, which to use
Inputs and outputs that directly involve a human user/actor.
A dialog goes on between actor and system
User interface
User diagram
User-centered design
Usability
Refers to how easy a system is to learn and use
Usability
Visibility
Affordance
Feedback
2 main factors in Technology Adoption Model (TAM)
Perceived usefulness
Perceived ease of use
Performance expectancy
Effort expectancy
Unified Theory of Acceptance and Use of Technology (UTAUT) focus on
Performance expectancy
Effort expectancy
Perceived usefulness
Perceived ease of use
The appearance of the object suggests its function
Affordance
Visibility
Easy to use
Consistency
Define visibility in the principles of user-interface design
Visible on the display
Provides a response to a user action (feedback)
The appearance of the object suggests its function
Consistency across releases over time
Consistency needs to be:
Across platforms
Within a suite of applications
Within a particular application
On check boxes
Consistency across releases over time
Continuity
Consistency
Visibility
Appearance
What does closure do in principles of User-Interface Design
Closure on Dialogues: end of a series of actions
Protect user's work - at end and for partially complete work
Provide undo to reverse actions
Shortcut keys for experienced users and meaningful error messages represent which type of principles of User-Interface Design?
Usability and Efficiency
Readability and Navigation
Visibility and Closure
In developing a website or app, a ______ could be used to show the differences between screens
Storyboard
Chart
Display button
Error message
What is the process of designing basics using no color, no type style; graphics are shown as a simple box with an X drawn in?
Wireframing
Page design
Prototype
Testing
Wireframing allows the designer to plan:
The overall design, showing what element appears at each position on the page
The navigational design, showing how to move from one page to the next using buttons, tabs, links, and pull-down menus
The interface design, showing how to interact with the Website by inputting data or responding to questions
The term wireframe has largely been replaced with ___ which show what the output and input will look like
Mockups
Prototype
Testing design
What are the considerations when designing web-based applications?
Layout and formatting
Data entry and user actions- client side programming
Navigation and visibility - complete yet simple
Web design trends moved away from skeuomorphic design to flat Web design
What are some strategies when determine pricing the app
Choose a low-cost strategy
Introduce an app as a "premium" app
Adopt a "freemium" model that allow in-app purchases for premium features
Promote app by reducing its price
Offer app for free and accept advertising
Design activities correspond to components of the new system
The environment
Application components
User interface
Database
Software classes and methods
Two key elements in the environment
Communications with external systems
Communications with internal systems
Conforming to an existing Technology Architecture
Conforming to a new Technology Architecture
_________ is a well defined unit of software that performs some function(s)
Application component
Application design
Technology architecture
Current technology frequently uses Relational database management systems (RDBMS)?
True
False
Controls that maintain integrity of inputs, outputs and data and programs
Integrated into application programs and database
Integrity controls
Security controls
Controls that protect the assets from threats, internal and external
Part of the OS and the network
Integrity controls
Security controls
Focused on the use and governance of personal data -- things like putting policies in place to ensure that consumers' personal information is being collected, shared and used in an appropriate ways
Data privacy
Data security
Focuses more on protecting data from malicious attacks and the exploitation of stolen data for profit. While security is necessary for protecting data, it is not sufficient for addressing privacy
Data privacy
Data security
Objectives of integrity controls
Ensure that only appropriate and correct business transactions are accepted
Ensure that transactions are recorded and processed correctly
To protect and safeguard assets such as the database
Types of input controls
Value limit controls: Check range of inputs for reasonableness (i.e. GPA <=4)
Completeness controls: Ensure all the data has been entered
Data validation controls: specific data values are correct
Field combination controls: data is correct based on relationships between fields
To ensure that output arrives at proper destination (for authorized eyes) and is accurate, current, and complete
Output controls
Input controls
Information Security
Output limitation
What are the 3 components of the Fraud Triangle?
Opportunity
Motive
Rationalization
Threat
Converted encrypted data back to readable format
Decryption
Encryption
Remote wipe
Encryption key
Technique where a document is encrypted using a private key
Digital signature
Encryption
Decryption
Digital certificate
An organizations name and public that is encrypted and certified by an authorized third party
Digital signature
Encryption
Decryption
Digital certificate
Standard set of protocols for authentication and authorization
Secure Socket Layer (SSL)
Transport Layer Security (TLS)
IP Security (IPSec)
Hypertext Transfer Protocol Secure (HTTPS)
An internet standard equivalent to SSL
Secure Socket Layer (SSL)
Transport Layer Security (TLS)
IP Security (IPSec)
Hypertext Transfer Protocol Secure (HTTPS)
Internet security protocol at a low-level transmission
Secure Socket Layer (SSL)
Transport Layer Security (TLS)
IP Security (IPSec)
Hypertext Transfer Protocol Secure (HTTPS)
Internet standard to transmit web pages
Secure Socket Layer (SSL)
Transport Layer Security (TLS)
IP Security (IPSec)
Hypertext Transfer Protocol Secure (HTTPS)
A crime involving an attack or threat of an attack coupled with a demand for money or some other response in return for stopping or remediating the attack
Cyberattack
Cyberextortion
Cybercrime
Cyberthreat
