6.a : Quiz System Development Methodology

Question 1

(1)An organization is developing one of its applications using agile approach. Which of the following would be a risk in agile development process?

A. Insufficient documentation.
B. Insufficient testing.
C. Poor requirements definition.
D. Insufficient user involvement.

Answer 1

Answer: A. Insufficient documentation.

Explanation:
Agile allows the programmer to just start writing a program without spending much time on preplanning documentation. Less importance is placed on formal paper-based deliverables, with the preference being to produce releasable software in short iterations, typically ranging from 4 to 8 weeks.
Lack of testing might be an issue but without formal documentation it is difficult for an auditor to
gather objective evidence.

Question 2

(2)Which of the following is the characteristic of agile software development approach?

A. Systematic Documentation.
B. More importance is placed on formal paper-based deliverables.
C. Extensive use of software development tools to maximize team productivity.
D. Reviews at the end of each iteration to identify lessons learned for future use in the project.

Answer 2

Answer: D. Reviews at the end of each iteration to identify lessons learned for future use in the
project.
.
Explanation:
Dictionary meaning of agile is ‘able to move quickly and easily’. Agile allows the programmer to just
start writing a program without spending much time on preplanning documentation. Less
importance is placed on formal paper-based deliverables, with the preference being to produce
releasable software in short iterations, typically ranging from 4 to 8 weeks. At the end of each
iteration, the team considers and documents what worked well and what could have worked better,
and identifies improvements to be implemented in subsequent iterations. Agile projects do make
use of suitable development tools; however, tools are not seen as the primary means of achieving
productivity.

Question 3

(3)Which of the following is considered as limitation of the Agile Software development
methodology?

A. Quality of system may be impacted due to speed of development and limited budget.
B. Absence of well-defined requirements may end up with more requirements than needed.
C. Absence of review mechanism to identify lesions learned for future use in the project.
D. Incomplete documentation due to time management.

Answer 3

Answer: D. Incomplete documentation due to time management.

Explanation:
In the above scenario, major risk associated with agile development is lack of documentation.

Question 4

(4)An organization is developing one of its applications using prototyping approach. Which of the following would be an advantage of using prototyping for systems development?

A. Sufficient controls will be built in the system.
B. Sufficient audit trial will be built in the system.
C. Reduction in deployment time.
D. Sufficient change control will be built in the system

Answer 4

Answer: C. Reduction in deployment time.

Explanation:
A prototype is a small scale working system used to test the assumptions. Assumptions may be
about user requirements, program design or internal logic. This method of system development can
provide the organization with significant time and cost savings. Prototyping is the process of
creating systems through controlled trial and error. By focusing mainly on what the user wants and
sees, developers may miss some of the controls that come from the traditional systems
development approach; therefore, a potential risk is that the finished system will have poor
controls. In prototyping, changes in the designs and requirements occur quickly and are seldom
documented or approved; hence, change control becomes more complicated with prototyped
systems.

Question 5

(5)An organization is developing one of its applications using prototyping approach. Which of the following testing methods is MOST effective during the initial phases of prototyping?

A. Bottom-up
B. Parallel
C. Volume
D. Top-down

Answer 5

Answer: D. Top-down

Explanation:
In any given scenario, Top-down testing methods is MOST effective during the initial phases of
Prototyping. Top-down testing starts with the system’s major functions and works downward. The
initial emphasis when using prototyping is to create screens and reports, thus shaping most of the
proposed system’s features in a short period.

Question 6

(6)Which of the following techniques uses a prototype that can be updated regularly to meet ever changing user or business requirements?

A. Reverse Engineering
B. Object-oriented system development (OOD)
C. Software reengineering (BPR)
D. Rapid application development (RAD)

Answer 6

Answer: D. Rapid application development (RAD)

Explanation:
RAD enables the organization to develop systems quickly while reducing development cost and
maintaining quality. Rapid Application Development (RAD) uses a prototype approach that can be
updated continually to meet changing user or business requirements.RAD uses prototyping as its
core development tool no matter which underlying technology is used

Question 7

(7)Which of the following is an advantage of prototyping?

A. Prototyping ensures strong internal controls.
B. Prototyping ensures significant time and cost savings.
C. Prototyping ensures strong change controls.
D. Prototyping ensures that extra functions are not added to the intended system.

Answer 7

Answer: B. Prototyping ensures significant time and cost savings.

Explanation:
Prototyping is the process of creating systems through controlled trial and error. Prototype systems
can provide significant time and cost savings; however, other options are not the characteristics of
prototyping. They often have poor internal controls, change control becomes much more
complicated, and it often leads to functions or extras being added to the system that were not originally intend

Question 8

(8)An organization is developing one of its applications using prototyping approach. Change control can be impacted by the:

A. involvement of user in prototyping.
B. rapid pace of modifications in requirements and design.
C. trial and error approach in prototyping.
D. absence of integrated tools.

Answer 8

Answer: B. rapid pace of modifications in requirements and design.

Explanation:
In prototyping, changes in the designs and requirements occur quickly and are seldom documented or approved; hence, change control becomes more complicated with prototyped systems. Choices A, C and D are characteristics of prototyping, but they do not have an adverse effect on change
control.

Question 9

(9)An organization considering development of system should use which of the below methodology to develop systems faster, reduce development costs, and still maintain high quality?

A. CPM
B. Rapid application development (RAD)
C. PERT
D. Function Point Analysis

Answer 9

Answer: B. Rapid application development (RAD)

Explanation: -RAD enables the organization to develop systems quickly while reducing
development cost and maintaining quality. This is achieved by use of below techniques:
-RAD includes use of:
· Small and well trained development teams.
· Prototypes
· Tools to support modelling, prototyping and component reusability.
· Central repository
· Rigid limits on development time frames

Question 10

(10)Which of the following uses a prototype that can be updated continually to meet changing user or business requirements?

A. Critical Path Methodology (CPM)
B. Rapid application development (RAD)
C. Function point analysis (FPA)
D. Earned Value Analysis (EVM)

Answer 10

Answer: B. Rapid application development (RAD)

Explanation:
Explanation: Rapid application development (RAD) uses a prototype that can be updated continually to meet changing user or business requirements.

Question 11

(11)Which of the following is the main advantage of rapid application development (RAD) over the
traditional system development life cycle (SDLC)?

A. engages user in system development.
B. prioritizes testing of technical features.
C. simplifies conversion to the new system.
D. shortens the development time frame.

Answer 11

Answer: D. shortens the development time frame.

Explanation:
The greatest advantage of RAD is the shorter time frame for the development of a system. Choices A
and B are true, but they are also true for the traditional systems development life cycle. Choice C is not necessarily always true.

Question 12

(12)Which of the following technology or approach will facilitate the speedy delivery of information systems to the business user community?

A. Business process reengineering (BPR)
B. Computer-aided software engineering (CASE)
C. Rapid application prototyping (RAP)
D. Waterfall Approach

Answer 12

Answer: C. Rapid application prototyping (RAP)

Explanation:
RAD enables the organization to develop systems quickly while reducing development cost and
maintaining quality. This is achieved by use of below techniques:
· Small and well trained development teams.
· Prototypes
· Tools to support modelling, prototyping and component reusability.
· Central repository
· Rigid limits on development time frames

Question 13

(13)Which of the following is a advantage of using of object-oriented development technique?

A. ability to reuse modules.
B. improvement in system performance.
C. increase control effectiveness.
D. rapid system development process.

Answer 13

Answer: A. ability to reuse modules.

Explanation:
One of the major benefits of object-oriented design and development is the ability to reuse modules. The other options are not normally benefit of the object-oriented technique.

Question 14

(14)Which of the following is an object-oriented technology characteristic that permits an enhanced degree of security over data?

A. Inheritance
B. Dynamic warehousing
C. Encapsulation
D. Polymorphism

Answer 14

Answer: C. Encapsulation

Explanation:
OO uses a technique known as ‘encapsulation’ in which one object interacts with another object.
This is a common practice whereby any particular object may call other object to perform its work.
Encapsulation prevents accessing either properties or methods that have not been previously defined as public. This means that any implementation of the behaviour of an object is not accessible.

Question 15

(15)In which of the below mentioned scenario, waterfall life cycle approach for system development is most likely to be used:

A. requirements are well defined and no changes are expected.
B. requirements are well defined and the project is subject to time pressures.
C. requirements are not finalized and subject to frequent changes.
D. the project will involve the use of new technology.

Answer 15

Answer: A. requirements are well defined and no changes are expected.

Explanation:
In any given scenario, waterfall approach is most suitable when requirements are well defined and
understood and no major changes are expected. When requirements changes frequently, the
waterfall model has not been successful. In these circumstances the various forms of iterative
development life cycle gives the advantage of breaking down the scope of the overall system to be
delivered, making the requirements gathering and design activities more manageable

Question 16

(16)Which of the following technique is used to study a application or software to see how it functions and to use that information to develop a similar system?

A. Object oriented.
B. Reverse Engineering.
C. Software Reengineering.
D. Agile development

Answer 16

Answer: B. Reverse Engineering.

Explanation:
Reverse engineering is the process of studying and analyzing an application and the information is
used to develop a similar system.

Question 17

(17)Which of the following technique is used to enhance the system by extracting and reusing design and program components?

A. Object oriented.
B. Reverse Engineering.
C. Software Reengineering.
D. Agile development

Answer 17

Answer: C. Software Reengineering.

Explanation:
Reengineering is the process of updating an existing system by extracting and reusing design and
program components. This process is used to support major changes in the way an organization
operates.

Question 18

(18)An IS auditor reviewing the system development approach should be concerned about:

A. UAT is managed by user group.
B. A quality plan is not part of the contracted deliverables.
C. Module is released in phases instead of full implementation.
D. Prototyping is used to ensure that system is aligned with business objectives.

Answer 18

Answer: B. A quality plan is not part of the contracted deliverables.

Explanation:
For better deliverable, a quality plan is an essential element of all projects. Detailed quality plan for
the proposed development contract should be documented and should encompass all phases of the
development. UAT is normally managed by the user area to ensure systems are as per user requirements. If the system is large, a phased-in approach to implementing the application is a
reasonable approach. Prototyping is a valid method to ensure that system is aligned with business
objectives.

Question 19

(19)Which of the following is the MAJOR advantage of a component-based development?

A. ability to manage multiple data types.
B. ability to model complex relationships.
C. ability to meet the demands of a changing environment.
D. ability to support multiple development environments.

Answer 19

Answer :D. ability to support multiple development environments.

Explanation:
In any given scenario, the major advantage of a component-based development approach is the
support of multiple development environments. Components written in one language can interact
with components written in other languages or running on other machines, which can increase the
speed of development. Software developers can then focus on business logic. The other choices are
not the most significant advantages of a component-based development approach.

Question 20

(20) Which of the following would be the IS auditor’s main concern while reviewing the business
process reengineering process?

A. Appropriate Key controls are in place to protect assets and information resources.
B. Requirements of the new system are appropriately documented.
C. Time and resource budget is adhered to.
D. Roles and responsibilities assigned for new process.

Answer 20

Answer: A. Appropriate Key controls are in place to protect assets and information resources.

Explanation:
The audit team should be concerned about the key controls and verify that the controls are in place
before implementing the new process. Choices B, C and D are objectives that the BPR process should achieve, but they are not the auditor’s primary concern.

Question 21

(21) An organization is implementing business process reengineering (BPR) project for its critical system. Which of the following is the impact of BPR?

A. business processes will remain stable.
B. information technologies will not change.
C. the process will improve performance of product & services.
D. input from clients and customers will no longer be necessary.

Answer 21

Answer: C. the process will improve performance of product & services.

Explanation:
As a reengineering process takes hold, certain key results will begin to emerge, including a
concentration on process as a means of improving product, service and profitability. In addition,
new business priorities and approaches to the use of information as well as powerful and more
accessible information technologies will emerge. Often, the roles of client and customers will be
redefined providing them with more direct and active participation in the enterprise’s business
process.

Question 22

(22)An organization is implementing business process reengineering (BPR) project for its critical system. Which of the following is the FIRST step?

A. Defining the scope and areas to be reviewed.
B. Designing a project plan.
C. Analyzing the process under review.
D. Reengineering the process under review

Answer 22

Answer: A. Defining the scope and areas to be reviewed.

Explanation:
First step will be to understand the scope and area for which BPR is required. On the basis of the
definition of the areas to be reviewed, the project plan is developed. Thereafter, the process can be
reengineered, implemented and monitored for continuous improvement.

Question 23

(23) Which of the following represents a typical prototype of an interactive application?

A. Program logic and screens
B. Interactive Edits and Screens
C. Interactive edits program logic and sample reports
D. Screens, interactive edits, program logics and sample re

Answer 23

Answer B. Interactive Edits and Screens

Explanation:
Program logics are not produced by a prototyping tool. This often leads to confusion for the end
user who expects quick implementation of program logics.