CAST

Question 1

What is software intelligence?

Answer 1

Analyses database structures, code components, interdependencies etc

Question 2

What are the 3 cast softwares?

Answer 2

Cast highlight - rapid portfolio analysis (overview of many applications)

Cast AIP- deep application analysis (for specific applications)

cast imaging - architecture visualizing and blueprinting

Question 3

What are the core capabilities of CAST Highlight?

Answer 3

A SaaS solution with:

Software health - resiliency and agility
Cloud Readiness - blockers/boosters
Software Composition - Open source vulnerabilities and IP risks
Private Data detection - detects sensitive data manipulation

Question 4

What are the use cases for CAST highlight?

Answer 4

Application Rationalization: Application rationalization is a process of going over the application inventory to determine which applications should be retired, retained, reposted, replatformed, refactored or reimagined.

Cloud Migration: detects code blockers/boosters, lays out migration roadmap, prioritizes apps based on cloud readiness and business impact. Recommends services to use from cloud providers and identifies whether solution should be IaaS, PaaS or SaaS

Open Source Risk Management: Risk from third party components (legal/licensing, abandonware/component requiring updates and security risks)

Technology Due Diligence: compliance with sensitive data usage, inventory of technology stack, advice on reducing technical debt

Question 5

What are the primary inputs for CAST?

Answer 5

Code scans + qualitative surveys

Question 6

What are the 3 components of the software health dashboard?

Answer 6

Resiliency - likelihood of errors in production based on coding industry standards
Agility - ease of upgrading/maintaining
Elegance - measure of complexity

Question 7

What are the 3 components of the open source dashboard?

Answer 7

Security/Vulnerability risks
IP licensing risks
age/obscelence risks

Question 8

What are the 4 portfolio level views under software composition analysis?

Answer 8

Open source safety: graph where the vertical axis has business impact from qualitative surveys and horizontal axis is open source safety (from vunerability, license and obscelence)
Components; third party components, at an individual level can identify transitive dependency threats, also includes info such as component repositories, last used release distribution and number of component versions
Vulnerabilities: Vunerabilities across the entire portfolio based on critical, high, medium and low severity
Licenses: Heat map and information on open source licenses used by different components in applications in the portfolio

Question 9

What are the export formats under software composition?

Answer 9

Excel and Powerpoint

Question 10

What are the 4 portfolio level views under Cloud Readiness?

Answer 10

Decision Matrix: visual representation for applications where y axis is business criticality and x axis is how clead ready an application is.
Health Factors: Cloud readiness is y axis and software resiliency is on the x axis, but all health factors (resiliency, agility, elegance are shown on an app when hovered over)
Cloud Requirements: Aggregate summary of boosters and blockers
Application links dashboard: Visualization of app to app dependencies (via http connection, API connection, FTP connection, SOAP connection etc)

Question 11

How can blockers be exported?

Answer 11

Powerpoint, Excel, JIRA

Question 12

What cloud platforms are their recommendations for?

Answer 12

Azure,AWS

Question 13

What are the 4 smart segments in the CloudReady dashboard?

Answer 13

Quick wins: Low BI and high cloud readiness
Core Cloud: High business impact and high cloud readiness, associated with refactoring effort
Long Term Bets: High business impact, lower cloud readiness. Good candidates for IaaS and then moving to PaaS later
Pursue later: Low BI low cloud readiness, candidates for consolidation/retiring.

Question 14

What is a domain?

Answer 14

Conceptual grouping of applications based on user defined charactersitics (i.e. department, geography)

Can add sub domains under main domains

Question 15

How to configure domains?

Answer 15

go to manage portfolio -> users and apps -> add under total domains

same steps for adding sub domains

Question 16

How to add apps to a domain?

Answer 16

go to manage portfolio -> users and apps -> add under total applications

name application and then select the icon next to the domain(s) you want it apart of

can change who can edit it as well

Question 17

How do you create users?

Answer 17

go to manage portfolio -> users and apps -> invite under total users

Select the user’s email, role and domain that they belong to

Question 18

What are the 4 user roles?

Answer 18

Portfolio Manager - Full access rights and configuration (app creation, portfolio organization and launching snapshot analysis)
Result Viewer - read only access
Domain Contributor - Like application contributor but for all apps in a specific domain
Application Contributor - access CAST Highlight to scan their source code and fill in app survey for specific applications

Question 19

How do you add an existing survey to your portfolio?

Answer 19

manage portfolio -> Manage Surveys -> Survey Catalog and click the plus button for the corresponding existing survey

Question 20

How do you create a survey?

Answer 20

manage portfolio -> Manage Surveys -> Active Surveys and click the create survey button

Enter survey name and description and then the survey will automatically be added to the portfolio

Question 21

How do you create a question?

Answer 21

manage portfolio -> Manage Surveys -> Questions and click the create Question button

Enter the question name, type of values etc and then click the checkmark beside it and then the orange button on the corresponding active survey to add it

Question 22

How do you configure a new campaign?

Answer 22

manage portfolio -> Manage Campaign -> create campaign

Then fill out the campaign name + due date

Configuration: Choose between whether or not to use source scan and survey answers to generate analytics

Application Scope: Select from Domains or specific applications to include in the campaign

Notifications: Send a customizeable message when you start the campaign

Question 23

How is cloud readiness determined?

Answer 23

Combination of code scan + survey

Question 24

How is the recommended effort determined?

Answer 24

Using COCOMO 2 standards

Question 25

What does the application links survey do?

Answer 25

Determine relationship/dependencies between apps

Question 26

How is business impact calculated?

Answer 26

Through survey answers