Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

CISA > Domain 3 - IS Acquisition, Dev, & Implementation > Flashcards

Domain 3 - IS Acquisition, Dev, & Implementation Flashcards

1
Q

Methods that estimate project duration or timelines

A

PERT/CPM (PERT is first preference)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What helps schedule/monitor progress of a project (simply)?

A

Gantt chart

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What helps monitor the progress of a project with detail around budget/actual/estimates?

A

EVA - earned value analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What technique estimates the size of software development efforts? (Indirect measure)

A

FPA (function point analysis)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What prevents cost overruns and delivery delays?

A

Timebox management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Zero slack time =

A

Overall completion time - time for activity

(Critical activity)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which phase should a proper plan and strategy for new systems be developed ?

A

The design phase

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Scope creep

A

Uncontrolled project scope due to continuous changes in project requirements
- major factor in project failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Waterfall approach

A

-Most common method of software development
-for stable and well defined projects
-after completion of each stage, testing is done before moving on to next stage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

System development life cycle (SDLC) phases

A

1) feasibility study
2) requirements definition
3A) software selection & acquisition (purchased systems)
3B) design (in-house development)
4A) configuration (purchased)
4B) development (in-house)
5) final testing and implementation
6) post implementation review

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What develops systems quickly while reducing costs and maintaining quality ?

A

RAD - rapid application development

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Prototypes (RAD approach)

A

Provides time and costs savings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Most effective testing method for prototype

A

Top down approach

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Major risk to agile development

A

Lack of documentation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Major benefit of (OOSD) object oriented system development

A

Ability to reuse objects/modules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

OOSD Polymorphism

A

Same message is interpreted differently 2 or more objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

OOSD encapsulation

A

Permits enhanced degree of security over data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Difference between reengineering and reverse engineering

A

Reengineering- updates a system
Reverse engineering- produces a similar system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Major benefit of component based development ?

A

Ability to support multiple development environments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Important characteristic to the agile approach

A

A systematic review after the completion of each iteration to identify areas of improvement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

The prototyping approach is used to design:

A

Screens, interactive edits, and sample reports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What detects transposition and transcription errors and ensure data accuracy ?

A

Check digit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What detects transmission errors and ensures data integrity and COMPLETENESS?

A

Parity Bit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the same as parity bit but used for more complex errors?

25
Most advanced version of parity and checksum
CRC cyclical redundancy checksums
26
Forward error control
Same as CRC but corrects the error Objective - to correct data transmission error
27
Automated system balancing
Reconciles total input and total output; helps determine if any transactions are lost during processing
28
Data integrity principles of ACID
Atomicity Consistency Isolation Durability
29
Atomicity
Transaction is processed completely or not at all
30
Consistency
All integrity conditions applied to each transaction
31
Isolation
Each transaction should be separated from other transactions
32
Durability
Database should be resilient enough to survive any system failure
33
What is best to prevent duplication of vouchers during data entry
Sequence check
34
DSS (decision support system) enables
Flexibility in the users approach to decision-making
35
Main risk of DSS
Inability to specify purpose and usage patterns
36
When reviewing the DSS, an IS auditor should be most concerned with
The level of skills and experiences contains in the knowledge base
37
White box approach
-Applied in unit testing -Testing of internal program logic
38
Recovery testing
Checking systems ability to recover after a hardware or software failure
39
Security testing
Testing of appropriate access control and other security measures
40
Load testing
Testing of performance of systems during peak hours (processing large quantity of data)
41
Volume testing
Testing to determine max volume of records/data the application can handle
42
Stress testing
Testing to determine the max number of concurrent users/services the application can process -best to use live data in a test environment
43
Performance testing
Comparing the performance of the system to other equivalent systems using well defined benchmarks
44
Regression testing
Ensures changes or corrections in a program have not introduced new errors
45
Sociability testing
Ensures new or modified system can work in a specific environment w/o greatly impacting the existing system
46
Parallel testing
Ensures implementation of new system meets user requirements
47
Parallel changeover (cutover)
-When both a new and old system are running simultaneously to test reliability and performance of new system before discontinuing old. -greatest redundancy (duplication)
48
Abrupt (direct) changeover
New system is implemented and old system is taken off immediately; riskiest changeover
49
Checksum ensures
Integrity
50
Stress testing should be carried out in a:
Test environment using live workloads
51
Unit testing
Development stage / white box approach
52
Integrated/interface testing
Testing of 2 or more modules or components that pass info from one area to another (connection)
53
System testings (6)
Recovery, security, load, volume, stress, performance
54
Hash totals
Help detect errors in data processing; indicates an error in data integrity
55
Functional acknowledgments
One of the main controls used in data mapping; acts as an audit trail for EDI transactions
56
3 primary dimensions of a project
Deliverables Allocated resources Delivery time
57
EUCs may not be subject to
Testing and IT general controls
58
When using agile development, what should be found during review
Postiteration reviews that identify lessons learned for future use in the project

CISA (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions