Deck 12: Mis Management Processes: Process Management, systems Development, and Security

Question 1

Parallel installation is also called direct installation.

Answer 1

False

Question 2

Business analysts work primarily with systems development,but they are also involved in business processes to a small extent.

Answer 2

False

Question 3

BPM is a cyclical process for systematically monitoring,modeling,creating,and implementing business processes.

Answer 3

True

Question 4

With regard to people,the design stage in SDLC involves developing job descriptions.

Question 5

Impractical information systems projects are eliminated after assessing its feasibility with an organization's objectives.

Question 6

A vulnerability is some measure that individuals or organizations take to block the threat from obtaining the asset.

Question 7

When a pilot implementation fails,the failure is contained within a boundary.

Question 8

The work done during the maintenance activity of the SDLC process is either to fix the system or to adapt it to changes in requirements.

Question 9

The term system conversion refers to the process of testing software.

Question 10

Tasks in the implementation activity of the SDLC process involve building and testing system components and converting users to the new system and possibly new business processes.

Question 11

Both Scrum and SDLC are processes that create and update existing information systems.

Question 12

Poorly written application programs and procedures are sources of security threats.

Question 13

A business process may use one or more information systems,but an information system may be used by only one business process.

Question 14

Agile development methodologies support just-in-time design.

Question 15

Systems analysts are IS professionals who understand both business and technology.

Question 16

Information systems security is the process of preventing unauthorized access to an IS or modification of its data.

Question 17

Using HTTP rather than HTTPS will provide an effective safeguard against security threats.

Question 18

The effectiveness objective of an organization determines how well a process uses its resources.

Question 19

The nature of the SDLC process accepts that systems requirements are always changing.

Question 20

In the BPM activity of creating process components,the team designs changes to the business process at a depth sufficient for implementation.

Question 21

Most secure communication over the Internet uses a protocol called HTTP.

Question 22

One technique to safeguard against cross site scripting is to design Web sites to accept only text-based replies.

Question 23

Secure Socket Layer uses a combination of public key/private key and symmetric encryption.

Question 24

Unlike ATM cards,a smart card has a magnetic strip.

Question 25

A public key is used for decoding messages in public key/private key asymmetric encryption used over the Internet.

Question 26

Account management concerns the modification of existing account permissions and the removal of unneeded accounts.

Question 27

Natural disasters present the largest risk for infrastructure loss.

Question 28

Hackers use Big Data software to acquire data to find out passwords and other sensitive data.

Question 29

Firewalls can block traffic from particular sites known for malicious content to any user behind it.

Question 30

Symmetric encryption is simpler and much more faster than asymmetric encryption.

Question 31

When organizations store databases in the cloud,all safeguard measures should be exclusive of the cloud service contract.

Question 32

Balancing the risks and costs of a security system is the responsibility of system developers.

Question 33

Cookies are small files that browsers store on a computer when a user visits a Web site.

Question 34

An important function of the senior management is to eliminate risks,as risks cannot be managed.

Question 35

Individuals holding multiple accounts should have different passwords for each account to safeguard against security threats.

Question 36

Systems use user names to authenticate users.

Question 37

IP spoofing is a situation in which a computer registers on a network without using an IP address.

Question 38

A key is a physical device that is used to lock and unlock a message.

Question 39

Drive-by sniffers often target protected wireless networks to monitor and intercept the wireless traffic at will.

Question 40

Organizations should avoid using security considerations as a criterion while hiring employees.

Question 41

Once the goals and scope of a new information system is defined,the next immediate task is to ________.

A) plan the project
B) create procedures
C) form a project team
D) assess its feasibility

Question 42

Dorex Manufacturing builds an ERP system to streamline its business activities.After being tested,the company implements the system only in the procurement department.This is an example of ________ installation.

A) parallel
B) phased
C) pilot
D) plunge

Question 43

Which of the following is the most important activity in the systems development process?

A) defining the system
B) maintaining the system
C) designing the system's components
D) determining the system's requirements

Question 44

A(n)________ is a formal description of a system's response to use and misuse scenarios.

A) test plan
B) as-is model
C) digital certificate
D) code injection

Question 45

With ________ installation,an organization shuts off the old system/business process and starts the new one.

A) parallel
B) pilot
C) plunge
D) phased

Question 46

Which of the following is the first activity in the SDLC process?

A) designing system components
B) determining requirements
C) defining the system
D) developing technical safeguards

Question 47

During the modeling activity of BPM,teams build an as-is model which ________.

A) simulates the ideal situation
B) designs new business processes
C) documents the current situation
D) models the ideal behavior of team members

Question 48

The term system conversion refers to the phase in which an organization ________.

A) designs the software for a new system
B) installs a new system
C) tests a new system
D) designs the hardware of a new system

Question 49

Passwords are the primary means of authentication for information systems.

Question 50

Charko Chemicals is a firm that supplies chemicals to pharmaceutical companies in the United States.The company implements SCM to reduce its operational costs.Even after the implementation of the SCM system,the company does not shut down the old system and runs both the systems simultaneously.This is an example of ________ installation.

A) plunge
B) pilot
C) phased
D) parallel

Question 51

Why is it essential to assess the feasibility of a new information system?

A) to restrict projects that are not too challenging
B) to determine the most suitable vendor for a project
C) to begin the systems development process
D) to avoid paying more for a project that is worth less

Question 52

During the ________ activity of BPM,managers evaluate process measures against their objectives and respond to changes in the business climate.

A) component creation
B) monitoring
C) modeling
D) process implementation

Question 53

With ________ installation,a new system/business process is installed in stages across an organization.

A) parallel
B) pilot
C) plunge
D) phased

Question 54

Which of the following is the last activity in the SDLC process?

A) implementing the system
B) testing the system
C) creating system components
D) maintaining the system

Question 55

With ________ installation,a new system/business process is installed and operated alongside the old system until the new system is tested and fully operational.

A) parallel
B) pilot
C) plunge
D) phased

Question 56

With ________ installation,organizations implement an entire system/business process on a limited portion of the business.

A) parallel
B) phased
C) pilot
D) plunge

Question 57

In a typical project team,________ integrate the work of the programmers,testers,and users.

A) business analysts
B) communication specialists
C) systems analysts
D) database designers

Question 58

Maintaining the same password for a long duration will increase system security.

Question 59

An organization purchases SAP's ERP system.After customizing the system and training employees,the organization shuts down the old system and implements the new one across all business processes.This is an example of ________ installation.

A) parallel
B) plunge
C) pilot
D) phased

Question 60

An incident response plan includes how employees are to respond to security problems,whom they should contact,and the steps they can take to reduce further loss.

Question 61

A malicious hacker flooded an online retailer's server with millions of bogus transactions.Due to this,the Web site's server was overloaded and the site was unable to process legitimate customer orders.Which of the following is being illustrated in this scenario?

A) spoofing
B) sniffing
C) phishing
D) denial-of-service

Question 62

Browsing through an online blog,Ronnie clicks on one of the blogger's links and is logged out of his system.He loses access to his system due to a malicious code that was downloaded from the link.This is a clear case of ________.

A) cross site scripting
B) phishing
C) spamming
D) denial of service

Question 63

Which of the following is a valid difference between a password and user name?

A) A password is used to encode information, whereas a user name is used to decode information.
B) Unlike a password, a user name is more complex.
C) A user name identifies the user, whereas a password authenticates the user.
D) A user name is common among users, whereas a password is unique.

Question 64

________ occurs when a person breaks into computers,servers,or networks to steal data.

A) Phishing
B) Pretexting
C) Digital footprinting
D) Hacking

Question 65

Which of the following statements is true about biometric authentication?

A) It uses personal physical characteristics for authentication.
B) It is less invasive than other methods of authentication.
C) It uses a microchip loaded with identifying data to authenticate users.
D) It provides weak authentication compared to other methods.

Question 66

How do agile techniques overcome the problems of the SDLC?

A) Agile techniques anticipate requirement changes.
B) Agile techniques deliver products at the very end of the process.
C) Agile techniques generate value at the very end.
D) Agile techniques design the overall system in the start of the process.

Question 67

You receive an email from a reputed company claiming that it will pay you a large sum of money if you provide your bank account details.Later,you identify that the email was not sent by the company.This scenario exemplifies ________.

A) sniffing
B) keylogging
C) phishing
D) denial of service

Question 68

Which of the following is a technique for intercepting computer communications?

A) phishing
B) sniffing
C) keystroke logging
D) pretexting

Question 69

________ is a social engineering technique in which a person pretends to be a legitimate company and sends emails requesting confidential data.

A) Phishing
B) Keylogging
C) Sniffing
D) Denial of service

Question 70

How can individuals safeguard their data from being misused?

A) by storing passwords in personal mails
B) by using the same password for all email accounts
C) by removing temporary Internet files
D) by enabling Web sites to store cookies

Question 71

________ is the process of transforming clear text into coded,unintelligible text for secure storage or communication.

A) Code injection
B) Pretexting
C) Encryption
D) Authentication

Question 72

Which of the following is a senior management's function to safeguard against security threats to an organization?

A) removing cookies
B) backing up data
C) creating passwords
D) managing risks

Question 73

________ refers to a social engineering attack in which someone deceives by pretending to be someone else.

A) Pretexting
B) Keylogging
C) Sniffing
D) Denial of service

Question 74

In the context of the sources of threats,computer crime involves ________.

A) poorly designed procedures
B) intentional destruction of data
C) natural events and disasters
D) poorly written applications

Question 75

How is scrum distinguished from SDLC ?

A) Scrum resists changes, whereas SDLC accepts changes.
B) Scrum is a dynamic process, whereas SDLC is structured.
C) Scrum creates value at the end, whereas SDLC creates it early.
D) Scrum is a waterfall model, whereas SDLC supports iterations.

Question 76

A group of intruders accessed RK Bank's IP address and accepted payments on the bank's behalf.This attack is an example of ________.

A) sniffing
B) keylogging
C) spoofing
D) denial of service

Question 77

A number used to encrypt data is called a(n)________.

A) signature
B) key
C) cookie
D) escrow

Question 78

In the case of ________,the same key is used to encode and to decode a message.

A) asymmetric encryption
B) digital signatures
C) symmetric encryption
D) digital certificates

Question 79

Which of the following is characteristic of a strong password?

A) It should not contain any word in any language.
B) It should not have special characters.
C) It should not be long or complex to remember.
D) It should not be different across varied accounts.

Question 80

Which of the following is a principle of agile development methodologies?

A) It designs the overall system at the very beginning.
B) It generates value at the very end of the development process.
C) It assumes that project requirements do not change.
D) It frequently delivers a working version of the product.