Deck 12: Managing Systems Support and Security

Question 1

Which of the following is not an advantage of the release methodology?

A)all changes are tested together before a new system version is released
B)costs are reduced because only one set of system tests is needed
C)documentation changes are coordinated and become effective simultaneously
D)new features or upgrades are available more often

Answer 1

D

Question 2

If significant changes take place in an existing system or if a new version is released, the IT department might develop a ____.

A)user training package
B)documentation process
C)maintenance module
D)utility index

Answer 2

A

Question 3

Perfective maintenance ____.

A)adds enhancements to an operational system and makes the system easier to use
B)diagnoses and corrects errors in an operational system
C)involves changing an operational system to make it more efficient, reliable, or maintainable
D)requires analysis of areas where trouble is likely to occur in order to avoid problems

Answer 3

C

Question 4

____ means examining the whole in order to learn about the individual elements.

A)Synthesis
B)Risk management
C)Analysis
D)Risk identification

Question 5

As shown in the accompanying figure, once a system becomes stable, maintenance costs usually remain low and involve minor ____ maintenance.

A)corrective
B)adaptive
C)perfective
D)preventive

Question 6

The ____ is responsible for assigning maintenance tasks to individuals or to a maintenance team.

A)user
B)programmer
C)systems review committee
D)system administrator

Question 7

Adaptive maintenance ____.

A)adds enhancements to an operational system and makes the system easier to use
B)diagnoses and corrects errors in an operational system
C)involves changing an operational system to make it more efficient, reliable, or maintainable
D)requires analysis of areas where trouble is likely to occur in order to avoid problems

Question 8

____ costs include expenses for items such as supplies, equipment rental, and software leases.

A)Operational
B)Corrective
C)Maintenance
D)Adaptive

Question 9

____ expenses vary significantly during a system's operational life and include spending to support maintenance activities.

A)Preventive
B)Maintenance
C)Corrective
D)Adaptive

Question 10

As shown in the accompanying figure, maintenance expenses usually are high when a system is implemented because problems must be detected, investigated, and resolved by ____ maintenance.

A)corrective
B)adaptive
C)perfective
D)preventive

Question 11

As shown in the accompanying figure, ____ when it becomes clear that the company plans to replace the system.

A)adaptive, corrective, and perfective maintenance expenses all increase rapidly
B)perfective maintenance expenses increase rapidly, but adaptive and corrective maintenance typically decrease
C)adaptive and corrective maintenance expenses increase rapidly, but perfective maintenance typically decreases
D)adaptive, corrective, and perfective maintenance expenses all decrease rapidly

Question 12

____ involves studying the parts to understand the overall system.

A)Synthesis
B)Risk management
C)Analysis
D)Risk identification

Question 13

In a typical system, the initial version of the system is 1.0, and the release that includes the first set of maintenance changes is version ____.

A)1.0
B)1.1
C)2.0
D)2.1

Question 14

____ activities include changing programs, procedures, or documentation to ensure correct system performance; adapting the system to changing requirements; and making the system operate more efficiently.

A)Procedural
B)Documented
C)Maintenance
D)Programmatic

Question 15

Corrective maintenance ____.

A)adds enhancements to an operational system and makes the system easier to use
B)diagnoses and corrects errors in an operational system
C)involves changing an operational system to make it more efficient, reliable, or maintainable
D)requires analysis of areas where trouble is likely to occur in order to avoid problems

Question 16

Perfective maintenance usually is cost effective ____ the system's operational life.

A)early in
B)during the middle of
C)late in
D)throughout

Question 17

Preventive maintenance ____.

A)adds enhancements to an operational system and makes the system easier to use
B)diagnoses and corrects errors in an operational system
C)involves changing an operational system to make it more efficient, reliable, or maintainable
D)requires analysis of areas where trouble is likely to occur in order to avoid problems

Question 18

When setting priorities, many IT managers believe that evaluating all projects together leads to the best possible decisions because ____.

A)maintenance and new development require similar IT department resources
B)in IT departments organized into separate maintenance and development groups, it makes no sense to evaluate requests separately
C)maintenance is more likely to receive a proportional share of IT department resources
D)all of the above

Question 19

____ is a process for controlling changes in system requirements during software development.

A)EM
B)DM
C)CM
D)TM

Question 20

In most organizations, ____ IT department effort goes into supporting existing systems and making them more valuable to users.

A)no
B)less than half of all
C)more than half of all
D)all

Question 21

A ____ is an internal or external entity that could endanger an asset.

A)menace
B)strike
C)malware
D)threat

Question 22

____ ensures that authorized users have timely and reliable access to necessary information.

A)Availability
B)Integrity
C)Confidentiality
D)Risk management

Question 23

____ prevents unauthorized users from creating, modifying, or deleting information.

A)Availability
B)Integrity
C)Confidentiality
D)Risk management

Question 24

The ____ is the configuration of a system documented at the beginning of the project and consists of all necessary system requirements and design constraints.

A)functional baseline
B)operational baseline
C)allocated baseline
D)product baseline

Question 25

Preset ____ determine whether a firewall will allow network traffic to pass.

A)adaptations
B)rules
C)port scans
D)super-users

Question 26

____ means that in risk control, nothing is done.

A)Acceptance
B)Avoidance
C)Mitigation
D)Transference

Question 27

To measure system performance, companies use ____ testing, which uses a set of standard tests on one system to compare its performance and capacity to that of other systems.

A)metric
B)benchmark
C)threat
D)allocation

Question 28

____ shifts the risk to another asset or party, such as an insurance company, in risk control.

A)Acceptance
B)Avoidance
C)Mitigation
D)Transference

Question 29

The ____ documents a system at the end of the design phase, identifies any changes since the beginning of the project, and includes testing and verification of all system requirements and features.

A)functional baseline
B)operational baseline
C)allocated baseline
D)product baseline

Question 30

____ include the volume of online data, the number of records accessed, and the number of transactions processed in a given time period.

A)Metrics
B)Risk assessments
C)Allocations
D)Baselines

Question 31

A(n) ____ is an unauthorized attempt to increase permission levels.

A)privilege escalation attack
B)denial-of-service attack
C)Trojan horse
D)identity management invasion

Question 32

____ describes the amount of data that a system can transfer in a fixed time period.

A)Throughput
B)Resolution
C)Dimensionality
D)Bandwidth

Question 33

____ protects information from unauthorized disclosure and safeguards privacy.

A)Availability
B)Integrity
C)Confidentiality
D)Risk management

Question 34

Risk ____ measures risk likelihood and impact.

A)assessment
B)management
C)identification
D)control

Question 35

Risk ____ analyzes the organization's assets, threats, and vulnerabilities.

A)assessment
B)management
C)identification
D)control

Question 36

Risk ____ develops safeguards that reduce risks and their impact.

A)assessment
B)management
C)identification
D)control

Question 37

The ____ describes the system at the beginning of system operation and includes the results of performance and acceptance tests for the operational system.

A)functional baseline
B)operational baseline
C)allocated baseline
D)product baseline

Question 38

Bandwidth will not be measured in which of the following units?

A)Kbps (kilobits per second)
B)Mbps (megabits per second)
C)Dbps (decibits per second)
D)Gbps (gigabits per second)

Question 39

____ also can be used to measure the quality of IT support or services by measuring the time from a user request for help to the resolution of the problem.

A)Bandwidth
B)Turnaround time
C)Throughput
D)Response time

Question 40

A ____ is a formal reference point that measures system characteristics at a specific time.

A)feature line
B)baseline
C)product point
D)risk point

Question 41

Response time is affected by the____.

A)system design
B)capabilities
C)system vulnerabilities
D)processing methods

Question 42

Perfective maintenance can improve system reliability.

Question 43

The systems support and security phase is an important component of TCO (total cost of ownership) because ongoing maintenance expenses can determine the economic life of a system.

Question 44

The main objective of user training is to show users how to become service desk staff members.

Question 45

When planning capacity, detailed information is needed about ____.

A)the number of transactions and the number of queries
B)the number of threats and critical risks posed to a system
C)the number, type, and size of all generated reports
D)the daily, weekly, or monthly transaction patterns

Question 46

Using a release methodology increases the documentation burden. _________________________

Question 47

Indications that a system has reached the end of its economically useful life include ____.

A)adaptive and corrective maintenance is increasing rapidly
B)operational costs and execution times are decreasing rapidly
C)maintenance changes or additions are difficult and expensive to perform
D)users request significant new features to support business requirements

Question 48

The systems support and security phase begins when a system becomes operational and continues until the system reaches the end of its useful life.

Question 49

Attacks are hostile acts that target the system, or the company itself. _________________________

Question 50

A service desk is a highly effective replacement for traditional IT maintenance and support activities.

Question 51

The procedure for minor adaptive maintenance is similar to routine corrective maintenance.

Question 52

A main objective of a service desk is to ____.

A)show people how to use system resources more effectively
B)provide answers to technical or operational questions
C)make users more productive by teaching them how to meet their own information needs
D)choose the appropriate risk control strategy for the firm

Question 53

When network traffic is encrypted, it is invisible and its content and purpose are masked. _________________________

Question 54

Successful, robust systems often need the most support because users want to learn the features, try all the capabilities, and discover how the system can help them perform their business functions.

Question 55

Adaptive maintenance requests for major errors receive a high priority and a maintenance team begins work on the problem immediately. _________________________

Question 56

Adaptive maintenance always is less difficult than new systems development because the enhancements need not work within the constraints of an existing system.

Question 57

Although the procedures for corrective maintenance and adaptive maintenance are alike, minor corrective maintenance requires more IT department resources than minor adaptive maintenance.

Question 58

Possible disadvantages of rotating IT staff from maintenance to new systems groups include ____.

A)analysts learn only one skill and the organization is less versatile
B)overhead costs increase when people move from one job to another
C)systems analysts have less opportunity to become skilled at any one job
D)some analysts must spend a substantial amount of time in a job that is less desirable to them

Question 59

Both adaptive and perfective maintenance activities decrease in a dynamic business environment. _________________________

Question 60

Requests for corrective and adaptive maintenance normally come from the IT department, while users usually initiate perfective maintenance.

Question 61

When performing perfective maintenance, analysts often use a technique called software ____________________.

Question 62

Newly hired and recently promoted IT staff members often are assigned to maintenance projects because their managers believe that maintenance work offers a valuable learning experience.

Question 63

When analysts learn different skills, the organization is more versatile and people can shift to meeting changing business needs.

Question 64

With a release methodology, even when changes would improve system efficiency or user productivity, the potential savings must wait until the next release date, which might increase operational costs.

Question 65

In a PKE environment, each user on the network has a pair of keys: a public key and a private key.

Question 66

COMPLETION

As shown in the accompanying figure, ____________________ maintenance is a type of maintenance that improves efficiency.

Question 67

COMPLETION

As shown in the accompanying figure, ____________________ maintenance is a type of maintenance that adds new capability and enhancements.

Question 68

Bandwidth requirements are expressed in bytes per minute.

Question 69

When corrective action cannot occur immediately, users appreciate feedback from the system administrator and should be kept informed of any decisions or actions that affect their maintenance requests.

Question 70

Retention periods can be a specific number of months or years, depending on legal requirements and company policy.

Question 71

Configuration management is sometimes referred to as change control.

Question 72

COMPLETION

As shown in the accompanying figure, ____________________ maintenance is a type of maintenance performed to fix errors.

Question 73

As enterprise-wide information systems grow more complex, configuration management becomes less and less useful.

Question 74

Application security requires an understanding of services, hardening, application permissions, input validation techniques, software patches and updates, and software logs.

Question 75

One technique that can be used in perfective maintenance is software reengineering.

Question 76

A(n) ____________________ is a new feature or capability added to an operational system that makes the system easier to use.

Question 77

In many companies, the systems review committee separates maintenance requests from new systems development requests when evaluating requests and setting priorities.

Question 78

IT staff members usually initiate requests for perfective and preventive maintenance.

Question 79

As the first step in capacity planning, analysts develop a current model based on the system's present workload and performance specifications.

Question 80

Companies with limited resources always consider new systems development, adaptive maintenance, and corrective maintenance less important than perfective maintenance.