FINALTERM EXAMINATION
Spring 2008
CS507- Information Systems
Time: 90 min
M a r k s: 60
Question No: 1 ( M a r k s: 1 ) http://vuzs.net
A
newspaper article is a primary source if it reports events, but a
secondary source if it analyses and comments on those events.
True
False
A
newspaper article is a primary source if it reports events, but a
secondary source if it analyses and comments on those events.
Question No: 2 ( M a r k s: 1 ) http://vuzs.net
Factors of which of the following are basic elements of reducing manufacturing cost?
Cost
Production
Quality
Brand
Factors of production are basic elements of reducing manufacturing cost.
Question No: 3 ( M a r k s: 1 ) http://vuzs.net
Past court decisions have stated that privacy must be balanced against the needs of society.
True
Employers
have been successful in making these arguments when aggrieved workers
have filed lawsuits for privacy violations. The few court cases have
largely been decided in the employers' favor.
Question No: 4 ( M a r k s: 1 ) http://vuzs.net
ERP
s major objective is to tightly integrate the functional areas of the
organization and to enable seamless information flows across the
functional areas.
True
False
The major objective of ERP systems is to tightly integrate the functional areas of the organization.
Question No: 5 ( M a r k s: 1 ) http://vuzs.net
The
bullwhip effect refers to erratic shifts in orders up and down the
supply chain because of poor demand forecasting, price fluctuation,
order batching, and rationing within the chain.
False
The bullwhip effect refers to erratic shifts
in orders up and down the supply chain because of poor demand
forecasting, price fluctuation, order batching.
Question No: 6 ( M a r k s: 1 ) http://vuzs.net
Business-to-business EC (B2B) is one of the types of ECommerce.
True
False
Explanation: Business
to Business (B2B) is a model to e-commerce where businesses conduct
commerce amongst themselves over the Internet/Intranet.
Question No: 7 ( M a r k s: 1 ) http://vuzs.net
Which of the following is not considered Risk Management?
On
a daily basis, a manager analyses a situation and decides what actions
should be taken, if any, given the uncertainties being faced.
Risk Management addresses actions to resolve a program's problems.
A systematic approach to setting the best course of action by identifying and acting on risk issues
An RBM tool that helps to address potential problems that could interfere with the achievement of results.
Question No: 8 ( M a r k s: 1 ) http://vuzs.net
Which of the following is a weakness that can be accidentally triggered or intentionally exploited?
Vulnerability
Threat Identification
Audit Trial
Likelihood Identification
Question No: 9 ( M a r k s: 1 ) http://vuzs.net
Which
of the following is a logical record of computer activities, usage,
processing pertaining to an operating or application system or user
activities?
Audit trail
Control Log
Control trial
An
audit trail is a logical record of computer activities/usage/processing
pertaining to an operating or application system or user activities.
Question No: 10 ( M a r k s: 1 ) http://vuzs.net
Which of the following may include program code of application softwares, technical manuals, user manuals etc?
Documentation
Audit Trial
Control Trial
None of these
Documentation
may include program code of application software’s, technical manuals,
user manuals and any other system-related documentation.
Question No: 11 ( M a r k s: 1 ) http://vuzs.net
Documentation may include program code of application softwares, technical manuals, user manuals etc.
True
False
Documentation
may include program code of application software’s, technical manuals,
user manuals and any other system-related documentation.
Question No: 12 ( M a r k s: 1 ) http://vuzs.net
Accounts should have a control over various recording points in the entire process from procurement to finished good store room.
False
True
Accounts and Finance: Accounts
should have a control over various recording points in the entire
process from procurement to finished goods store room.
Question No: 13 ( M a r k s: 1 ) http://vuzs.net
Active Monitor software serves the concurrent monitoring as the system is being used.
True
False
Active Monitor: This software serves the concurrent monitoring as the system is being used.
Question No: 14 ( M a r k s: 1 ) http://vuzs.net
Which of the following is some action or event that can lead to a loss?
Threat
Damage
Accident
None of above
A threat is some action or event that can lead to a loss.”
Question No: 15 ( M a r k s: 1 ) http://vuzs.net
Which
of the following is the characteristic of being able to assign a
different meaning or usage to something in different contexts -
specifically?
OOP
Encapsulation
Inheritance
Polymorphism
is the characteristic of being able to assign a different meaning or
usage to something in different contexts - specifically, to allow an
entity such as a variable, a method, or an object to have more than one
form.
Question No: 16 ( M a r k s: 1 ) http://vuzs.net
The purpose of data flow diagrams is to provide a --------- between users and systems developers.
Linking bridge
Empty Space
Data Flows
Options a and b
The purpose of data flow diagrams is to provide a linking bridge between users and systems developers.
Question No: 17 ( M a r k s: 1 ) http://vuzs.net
If a flow chart become complex it is better to use connector symbols to reduce to number of flow lines.
True
False
Connectors: If the flowchart becomes complex, it is better to use connector symbols to reduce the number of flow lines.
Question No: 18 ( M a r k s: 1 ) http://vuzs.net
Information products made more valuable by their attributes, characteristics, or qualities
TRUE
FALSE
Information products made more valuable by their attributes, characteristics, or qualities.
Question No: 19 ( M a r k s: 1 ) http://vuzs.net
Commentaries are the example of _________ sources.
Primary
Tertiary
Secondary
Some examples of secondary sources:
1. bibliographies (may also be tertiary)
2. biographical works
3. commentaries
Question No: 20 ( M a r k s: 1 ) http://vuzs.net
Feed back is the integral part of the _______
Open system
Close System
Closed Loop System
Closed Loop System: A part of the output is fed back to the system to initiate control to change.
Question No: 21 ( M a r k s: 1 ) http://vuzs.net
The Iterative model emphasizes the need to go back and reiterate earlier steps a number of times as the project progresses.
True
False
The spiral model emphasizes the need to go back and reiterate earlier steps a number of times as the project progresses.
Question No: 22 ( M a r k s: 1 ) http://vuzs.net
Arrow is also called __________
Dotted line
Process
Flow line
Question No: 23 ( M a r k s: 1 ) http://vuzs.net
Rectangle shape in the flow charts represents___________
Decision
Process
Terminator
Question No: 24 ( M a r k s: 1 ) http://vuzs.net
__________ is a person who attempts to invade the privacy of the system.
Hacktivsts
Hackers
Crackers
A hacker is a person who attempts to invade the privacy of the system.
Question No: 25 ( M a r k s: 1 ) http://vuzs.net
_______ usually identified by the phrase "is a kind of”.
Inheritance
Class
Object
Inheritance: Inheritance is usually identified by the phrase "is a kind of.”
Question No: 26 ( M a r k s: 1 ) http://vuzs.net
Which
of the following is a logical record of computer activities, usage,
processing pertaining to an operating or application system or user
activities?
Control Log
Control trial
Audit trail
An
audit trail is a logical record of computer activities/usage/processing
pertaining to an operating or application system or user activities.
Question No: 27 ( M a r k s: 1 ) http://vuzs.net
An event-oriented log usually contain records describing system events, application events, or user events.
True
False
An event-oriented log ---- this usually contain records describing system events, application events, or user events.
Question No: 28 ( M a r k s: 1 ) http://vuzs.net
Threat source motivation is an output for Likelihood determination
True
False
Likelihood Determination:
The input to this phase is
• Threat source motivation
Question No: 29 ( M a r k s: 1 ) http://vuzs.net
BPR’s
major objective is to tightly integrate the functional areas of the
organization and to enable seamless information flows across the
functional areas.
True
False
The major objective of ERP systems is to tightly integrate the functional areas of the organization.
.
Question No: 30 ( M a r k s: 1 ) http://vuzs.net
Organizational Development is one of the types of Change.
True
False
Types of Change
• Organizational Development
• Reengineering
Question No: 31 ( M a r k s: 1 )
Define Risk Mitigation.
Answer:
Risk mitigation is a process that takes place after the process of risk assessment has been completed.
Question No: 32 ( M a r k s: 1 )
What are the value sets?
Answer:
Value sets: Each attribute has a Value Set (domain) i.e. defined parameters or the range in which value of the attribute may fall.
Question No: 33 ( M a r k s: 2 )
What are the purposes of the Objects?
Answer:
Objects
serve two purposes, they promote understanding of the real world and
provide a practical basis for computer implementation.”
Question No: 34 ( M a r k s: 2 )
What do you understand by Intrusion Detection Systems?
Answer:
Another
element to securing networks is an intrusion detection system (IDS).
IDS is used in balance to firewalls. An IDS works in combination with
routers and firewalls and it monitor network that how much it used
and it protects a company’s information systems resources from external
as well as internal mistreatment.
Question No: 35 ( M a r k s: 3 )
Differentiate CRM from ERP
Answer:
ERP & CRM
Customer
has become of critical importance in the modern day business. Early on,
organizations used to focus more on how much has been sold what has
been produced. But now the focus is quite different. Focus has been
placed on the requirements of the customer, providing quality service
and quickness of response to customer queries. Analysis of the customer
data from their personal habits to spending one’s have become a crucial
element of doing a successful business. ERP has this unique potential to
improve the quality of customer handling.
Question No: 36 ( M a r k s: 3 )
What is the purpose of decision symbol in the flow chart?
Answer:
- The symbol is used when a choice can be made between the options available.
- Such options are mutually exclusive.
- Only one flow line should enter a decision symbol, but two or three flow lines, one for each possible answer, should leave the decision symbol.
Question No: 37 ( M a r k s: 3 )
What are hackers?
Answer:
A
hacker is a person who attempts to invade the privacy of the system. In
fact he attempts to gain un authorized entry to a computer system by
circumventing the system’s access controls. Hackers are normally skilled
programmers, and have been known to crack system passwords, with quite
an ease.
Question No: 38 ( M a r k s: 5 )
Identify the objective and scope of security.
Answer:
Security Objective:
Organization
for Economic Cooperation & Development, (OECD) in 1992 issued
“Guidelines for the Security of Information Systems”. These guidelines
stated the security objective as “The protection of the interests of
those relying on information, and the information systems and
communications that delivers the information, from harm resulting from
failures of availability, confidentiality, and integrity.”
The security objective uses three terms:
• Availability – information systems are available and usable when required;
• Confidentiality – data and information are disclosed only to those who have a right to know it.
• Integrity – data and information are protected against unauthorized modification (integrity).
The
relative priority and significance of availability, confidentiality,
and integrity vary according to the data within the information system
and the business context in which it is used.
Scope of Security
The
concept of security applies to all information. Security relates to the
protection of valuable assets against loss, disclosure, or damage.
Valuable assets are the data or information recorded, processed, stored,
shared, transmitted, or retrieved from an electronic medium. The data
or information must be protected against harm from threats that will
lead to its loss, inaccessibility, alteration or wrongful disclosure.
Question No: 39 ( M a r k s: 5 )
Identify and define the types of active attacks.
Answer:
Active attacks:
After
getting proper information about system in passive attacks intruder
will obtain unauthorized access to modify data or programs, causing a
denial of service, escalating privileges, accessing other systems. They
affect the integrity, availability and authentication attributes of
network security.
Types of Active attacks
Common form of active attacks may include the following:
• Masquerading – involves carrying out unauthorized activity by impersonating a legitimate user of the system.
• Piggybacking –
involves intercepting communications between the operating system and
the user and modifying them or substituting new messages.
• Spoofing –
A penetrator fools users into thinking they are interacting with the
operating system. He duplicates logon procedure and captures pass word.
• Backdoors/trapdoors –
it allows user to employ the facilities of the operating system without
being subject to the normal controls.(vuzs)
• Trojan
Horse – Users execute the program written by the penetrator. The
program undertakes unauthorized activities e.g. a copy of the sensitive
data.
Question No: 40 ( M a r k s: 10 )
Differentiate the following :
Entity vs Entity Set
Encapsulation vs Inheritance
Answer:
Entity vs. Entity Set:
An
entity is an object that exists and is distinguishable from other
objects. An entity is described using a set of attributes. Whereas an
entity set is a set of entities of the same type that share the same
properties.
Encapsulation vs Inheritance:
Encapsulation means information hiding whereas Inheritance is usually identified by the phrase "is a kind of.”
Question No: 41 ( M a r k s: 10 )
There are many Internet Security Systems , one of them is Firewall System.
Explain in your own words what do you understand by Firewall and how it protects from Internet attacks?
Answer:
Firewall:
Firewall
is the primary method for keeping a computer secure from intruders. A
firewall allows or blocks traffic into and out of a private network or
the user's computer. Firewalls are widely used to give users secure
access to the Internet as well as to separate a company's public Web
server from its internal network. Firewalls are also used to keep
internal network segments secure.
In
the home, a personal firewall typically comes with or is installed in
the user's computer. Personal firewalls may also detect outbound traffic
to guard against spy ware, which could be sending your surfing habits
to a Web site. They alert you when software makes an outbound request
for the first time. In the organization, a firewall can be a stand-alone
machine or software in a server. It can be as simple as a single server
or it may comprise a combination of servers each performing some type
of firewall processing.
