Deck 12: Managing Systems Support and Security

Question 1

Perfective maintenance ____.

A) adds enhancements to an operational system and makes the system easier to use
B) diagnoses and corrects errors in an operational system
C) involves changing an operational system to make it more efficient, reliable, or maintainable
D) requires analysis of areas where trouble is likely to occur in order to avoid problems

Answer 1

C

Question 2

When setting priorities, many IT managers believe that evaluating all projects together leads to the best possible decisions because ____.

A) maintenance and new development require similar IT department resources
B) in IT departments organized into separate maintenance and development groups, it makes no sense to evaluate requests separately
C) maintenance is more likely to receive a proportional share of IT department resources
D) all of the above

Answer 2

A

Question 3

If significant changes take place in an existing system or if a new version is released, the IT department might develop a ____.

A) user training package
B) documentation process
C) maintenance module
D) all of the above

Answer 3

A

Question 4

Corrective maintenance ____.

A) adds enhancements to an operational system and makes the system easier to use
B) diagnoses and corrects errors in an operational system
C) involves changing an operational system to make it more efficient, reliable, or maintainable
D) requires analysis of areas where trouble is likely to occur in order to avoid problems

Question 5

Perfective maintenance usually is cost effective ____ the system's operational life.

A) early in
B) during the middle of
C) late in
D) all of the above

Question 6

Preventive maintenance ____.

A) adds enhancements to an operational system and makes the system easier to use
B) diagnoses and corrects errors in an operational system
C) involves changing an operational system to make it more efficient, reliable, or maintainable
D) requires analysis of areas where trouble is likely to occur in order to avoid problems

Question 7

____ means examining the whole in order to learn about the individual elements.

A) Synthesis
B) Risk management
C) Analysis
D) Risk identification

Question 8

In a typical system, the initial version of the system is 1.0, and the release that includes the first set of maintenance changes is version ____.

A) 1.0
B) 1.1
C) 2.0
D) 2.1

Question 9

As shown in the accompanying figure, maintenance expenses usually are high when a system is implemented because problems must be detected, investigated, and resolved by ____ maintenance.

A) corrective
B) adaptive
C) perfective
D) preventive

Question 10

Adaptive maintenance ____.

A) adds enhancements to an operational system and makes the system easier to use
B) diagnoses and corrects errors in an operational system
C) involves changing an operational system to make it more efficient, reliable, or maintainable
D) requires analysis of areas where trouble is likely to occur in order to avoid problems

Question 11

____ costs include expenses for items such as supplies, equipment rental, and software leases.

A) Operational
B) Corrective
C) Maintenance
D) Adaptive

Question 12

____ expenses vary significantly during a system's operational life and include spending to support maintenance activities.

A) Preventive
B) Maintenance
C) Corrective
D) Adaptive

Question 13

____ is a process for controlling changes in system requirements during software development.

A) EM
B) DM
C) CM
D) TM

Question 14

In most organizations, ____ IT department effort goes into supporting existing systems and making them more valuable to users.

A) no
B) less than half of all
C) more than half of all
D) all

Question 15

As shown in the accompanying figure, ____ when it becomes clear that the company plans to replace the system.

A) adaptive, corrective, and perfective maintenance expenses all increase rapidly
B) perfective maintenance expenses increase rapidly, but adaptive and corrective maintenance typically decrease
C) adaptive and corrective maintenance expenses increase rapidly, but perfective maintenance typically decreases
D) adaptive, corrective, and perfective maintenance expenses all decrease rapidly

Question 16

The release methodology offers all of the following advantages except ____.

A) all changes are tested together before a new system version is released
B) costs are reduced because only one set of system tests is needed
C) documentation changes are coordinated and become effective simultaneously
D) new features or upgrades are available more often

Question 17

____ involves studying the parts to understand the overall system.

A) Synthesis
B) Risk management
C) Analysis
D) Risk identification

Question 18

As shown in the accompanying figure, once a system becomes stable, maintenance costs usually remain low and involve minor ____ maintenance.

A) corrective
B) adaptive
C) perfective
D) preventive

Question 19

____ activities include changing programs, procedures, or documentation to ensure correct system performance; adapting the system to changing requirements; and making the system operate more efficiently.

A) Procedural
B) Documented
C) Maintenance
D) Programmatic

Question 20

The ____ is responsible for assigning maintenance tasks to individuals or to a maintenance team.

A) user
B) programmer
C) systems review committee
D) system administrator

Question 21

The ____ describes the system at the beginning of system operation and includes the results of performance and acceptance tests for the operational system.

A) functional baseline
B) operational baseline
C) allocated baseline
D) product baseline

Question 22

____ shifts the risk to another asset or party, such as an insurance company, in risk control.

A) Acceptance
B) Avoidance
C) Mitigation
D) Transference

Question 23

A(n) ____ is an unauthorized attempt to increase permission levels.

A) privilege escalation attack
B) denial-of-service attack
C) Trojan horse
D) identity management invasion

Question 24

____ prevents unauthorized users from creating, modifying, or deleting information.

A) Availability
B) Integrity
C) Confidentiality
D) Risk management

Question 25

____ means that in risk control, nothing is done.

A) Acceptance
B) Avoidance
C) Mitigation
D) Transference

Question 26

A ____ is a formal reference point that measures system characteristics at a specific time.

A) feature line
B) baseline
C) product point
D) risk point

Question 27

Risk ____ measures risk likelihood and impact.

A) assessment
B) management
C) identification
D) control

Question 28

____ describes the amount of data that a system can transfer in a fixed time period.

A) Throughput
B) Resolution
C) Dimensionality
D) Bandwidth

Question 29

____ protects information from unauthorized disclosure and safeguards privacy.

A) Availability
B) Integrity
C) Confidentiality
D) Risk management

Question 30

The ____ documents a system at the end of the design phase, identifies any changes since the beginning of the project, and includes testing and verification of all system requirements and features.

A) functional baseline
B) operational baseline
C) allocated baseline
D) product baseline

Question 31

Risk ____ develops safeguards that reduce risks and their impact.

A) assessment
B) management
C) identification
D) control

Question 32

____ also can be used to measure the quality of IT support or services by measuring the time from a user request for help to the resolution of the problem.

A) Bandwidth
B) Turnaround time
C) Throughput
D) Response time

Question 33

The ____ is the configuration of a system documented at the beginning of the project and consists of all necessary system requirements and design constraints.

A) functional baseline
B) operational baseline
C) allocated baseline
D) product baseline

Question 34

Depending on the system, bandwidth might be measured in any of the following except ____.

A) Kbps (kilobits per second)
B) Mbps (megabits per second)
C) Dbps (decibits per second)
D) Gbps (gigabits per second)

Question 35

____ include the volume of online data, the number of records accessed, and the number of transactions processed in a given time period.

A) Metrics
B) Risk assessments
C) Allocations
D) Baselines

Question 36

To measure system performance, companies use ____ testing, which uses a set of standard tests on one system to compare its performance and capacity to that of other systems.

A) metric
B) benchmark
C) threat
D) allocation

Question 37

A ____ is an internal or external entity that could endanger an asset.

A) menace
B) strike
C) malware
D) threat

Question 38

____ ensures that authorized users have timely and reliable access to necessary information.

A) Availability
B) Integrity
C) Confidentiality
D) Risk management

Question 39

Preset ____ determine whether a firewall will allow network traffic to pass.

A) adaptations
B) rules
C) port scans
D) super-users

Question 40

Risk ____ analyzes the organization's assets, threats, and vulnerabilities.

A) assessment
B) management
C) identification
D) control

Question 41

Indications that a system has reached the end of its economically useful life include ____.

A) adaptive and corrective maintenance is increasing rapidly
B) operational costs and execution times are decreasing rapidly
C) maintenance changes or additions are difficult and expensive to perform
D) users request significant new features to support business requirements

Question 42

Response time is affected by the____.

A) system design
B) capabilities
C) system vulnerabilities
D) processing methods

Question 43

The systems support and security phase is an important component of TCO (total cost of ownership) because ongoing maintenance expenses can determine the economic life of a system.

Question 44

Attacks are hostile acts that target the system, or the company itself. _________________________

Question 45

In addition to functioning as a valuable link between IT staff and users, a help desk is a central contact point for all IT maintenance activities.

Question 46

The procedure for minor adaptive maintenance is similar to routine corrective maintenance.

Question 47

Although the procedures for corrective maintenance and adaptive maintenance are alike, minor corrective maintenance requires more IT department resources than minor adaptive maintenance.

Question 48

The main objective of user training is to show users how to become help desk staff members.

Question 49

Both adaptive and perfective maintenance activities decrease in a dynamic business environment. _________________________

Question 50

When planning capacity, detailed information is needed about ____.

A) the number of transactions and the number of queries
B) the number of threats and critical risks posed to a system
C) the number, type, and size of all generated reports
D) the daily, weekly, or monthly transaction patterns

Question 51

Perfective maintenance can improve system reliability.

Question 52

Possible disadvantages of rotating IT staff from maintenance to new systems groups include ____.

A) analysts learn only one skill and the organization is less versatile
B) overhead costs increase when people move from one job to another
C) systems analysts have less opportunity to become skilled at any one job
D) some analysts must spend a substantial amount of time in a job that is less desirable to them personally

Question 53

Successful, robust systems often need the most support because users want to learn the features, try all the capabilities, and discover how the system can help them perform their business functions.

Question 54

When network traffic is encrypted, it is invisible and its content and purpose are masked. _________________________

Question 55

Requests for corrective and adaptive maintenance normally come from the IT department, while users usually initiate perfective maintenance.

Question 56

The systems support and security phase begins when a system becomes operational and continues until the system reaches the end of its useful life.

Question 57

Adaptive maintenance requests for major errors receive a high priority and a maintenance team begins work on the problem immediately. _________________________

Question 58

Adaptive maintenance always is less difficult than new systems development because the enhancements need not work within the constraints of an existing system.

Question 59

Using a release methodology increases the documentation burden. _________________________

Question 60

A main objective of a help desk is to ____.

A) show people how to use system resources more effectively
B) provide answers to technical or operational questions
C) make users more productive by teaching them how to meet their own information needs
D) choose the appropriate risk control strategy for the firm

Question 61

IT staff members usually initiate requests for perfective and preventive maintenance.

Question 62

In many companies, the systems review committee separates maintenance requests from new systems development requests when evaluating requests and setting priorities.

Question 63

As shown in the accompanying figure, ____________________ maintenance is a type of maintenance that adds new capability and enhancements.

Question 64

A(n) ____________________ is a new feature or capability added to an operational system that makes the system easier to use.

Question 65

Newly hired and recently promoted IT staff members often are assigned to maintenance projects because their managers believe that maintenance work offers a valuable learning experience.

Question 66

In a PKE environment, each user on the network has a pair of keys: a public key and a private key.

Question 67

As shown in the accompanying figure, ____________________ maintenance is a type of maintenance that improves efficiency.

Question 68

When analysts learn different skills, the organization is more versatile and people can shift to meeting changing business needs.

Question 69

As enterprise-wide information systems grow more complex, configuration management becomes less and less useful.

Question 70

Companies with limited resources always consider new systems development, adaptive maintenance, and corrective maintenance less important than perfective maintenance.

Question 71

If a maintenance request involves a severe problem, a system administrator either accepts or rejects the request or postpones action pending further study.

Question 72

Retention periods can be a specific number of months or years, depending on legal requirements and company policy.

Question 73

With a release methodology, even when changes would improve system efficiency or user productivity, the potential savings must wait until the next release date, which might increase operational costs.

Question 74

Bandwidth requirements are expressed in bytes per minute.

Question 75

As shown in the accompanying figure, ____________________ maintenance is a type of maintenance performed to fix errors.

Question 76

As the first step in capacity planning, analysts develop a current model based on the system's present workload and performance specifications.

Question 77

Using software ____________________ techniques, an analyst can analyze a system's quality or performance.

Question 78

Application security requires an understanding of services, hardening, application permissions, input validation techniques, software patches and updates, and software logs.

Question 79

One technique that can be used in perfective maintenance is software reengineering.

Question 80

When corrective action cannot occur immediately, users appreciate feedback from the system administrator and should be kept informed of any decisions or actions that affect their maintenance requests.