Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CISA > Domain 3 - IS Acquisition, Dev, & Implementation > Flashcards

Domain 3 - IS Acquisition, Dev, & Implementation Flashcards

1
Q

Methods that estimate project duration or timelines

A

PERT/CPM (PERT is first preference)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What helps schedule/monitor progress of a project (simply)?

A

Gantt chart

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What helps monitor the progress of a project with detail around budget/actual/estimates?

A

EVA - earned value analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What technique estimates the size of software development efforts? (Indirect measure)

A

FPA (function point analysis)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What prevents cost overruns and delivery delays?

A

Timebox management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Zero slack time =

A

Overall completion time - time for activity

(Critical activity)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which phase should a proper plan and strategy for new systems be developed ?

A

The design phase

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Scope creep

A

Uncontrolled project scope due to continuous changes in project requirements
- major factor in project failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Waterfall approach

A

-Most common method of software development
-for stable and well defined projects
-after completion of each stage, testing is done before moving on to next stage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

System development life cycle (SDLC) phases

A

1) feasibility study
2) requirements definition
3A) software selection & acquisition (purchased systems)
3B) design (in-house development)
4A) configuration (purchased)
4B) development (in-house)
5) final testing and implementation
6) post implementation review

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What develops systems quickly while reducing costs and maintaining quality ?

A

RAD - rapid application development

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Prototypes (RAD approach)

A

Provides time and costs savings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Most effective testing method for prototype

A

Top down approach

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Major risk to agile development

A

Lack of documentation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Major benefit of (OOSD) object oriented system development

A

Ability to reuse objects/modules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

OOSD Polymorphism

A

Same message is interpreted differently 2 or more objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

OOSD encapsulation

A

Permits enhanced degree of security over data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Difference between reengineering and reverse engineering

A

Reengineering- updates a system
Reverse engineering- produces a similar system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Major benefit of component based development ?

A

Ability to support multiple development environments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Important characteristic to the agile approach

A

A systematic review after the completion of each iteration to identify areas of improvement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

The prototyping approach is used to design:

A

Screens, interactive edits, and sample reports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What detects transposition and transcription errors and ensure data accuracy ?

A

Check digit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What detects transmission errors and ensures data integrity and COMPLETENESS?

A

Parity Bit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the same as parity bit but used for more complex errors?

A

Checksum

25
Q

Most advanced version of parity and checksum

A

CRC cyclical redundancy checksums

26
Q

Forward error control

A

Same as CRC but corrects the error
Objective - to correct data transmission error

27
Q

Automated system balancing

A

Reconciles total input and total output; helps determine if any transactions are lost during processing

28
Q

Data integrity principles of ACID

A

Atomicity
Consistency
Isolation
Durability

29
Q

Atomicity

A

Transaction is processed completely or not at all

30
Q

Consistency

A

All integrity conditions applied to each transaction

31
Q

Isolation

A

Each transaction should be separated from other transactions

32
Q

Durability

A

Database should be resilient enough to survive any system failure

33
Q

What is best to prevent duplication of vouchers during data entry

A

Sequence check

34
Q

DSS (decision support system) enables

A

Flexibility in the users approach to decision-making

35
Q

Main risk of DSS

A

Inability to specify purpose and usage patterns

36
Q

When reviewing the DSS, an IS auditor should be most concerned with

A

The level of skills and experiences contains in the knowledge base

37
Q

White box approach

A

-Applied in unit testing
-Testing of internal program logic

38
Q

Recovery testing

A

Checking systems ability to recover after a hardware or software failure

39
Q

Security testing

A

Testing of appropriate access control and other security measures

40
Q

Load testing

A

Testing of performance of systems during peak hours (processing large quantity of data)

41
Q

Volume testing

A

Testing to determine max volume of records/data the application can handle

42
Q

Stress testing

A

Testing to determine the max number of concurrent users/services the application can process
-best to use live data in a test environment

43
Q

Performance testing

A

Comparing the performance of the system to other equivalent systems using well defined benchmarks

44
Q

Regression testing

A

Ensures changes or corrections in a program have not introduced new errors

45
Q

Sociability testing

A

Ensures new or modified system can work in a specific environment w/o greatly impacting the existing system

46
Q

Parallel testing

A

Ensures implementation of new system meets user requirements

47
Q

Parallel changeover (cutover)

A

-When both a new and old system are running simultaneously to test reliability and performance of new system before discontinuing old.
-greatest redundancy (duplication)

48
Q

Abrupt (direct) changeover

A

New system is implemented and old system is taken off immediately; riskiest changeover

49
Q

Checksum ensures

A

Integrity

50
Q

Stress testing should be carried out in a:

A

Test environment using live workloads

51
Q

Unit testing

A

Development stage / white box approach

52
Q

Integrated/interface testing

A

Testing of 2 or more modules or components that pass info from one area to another (connection)

53
Q

System testings (6)

A

Recovery, security, load, volume, stress, performance

54
Q

Hash totals

A

Help detect errors in data processing; indicates an error in data integrity

55
Q

Functional acknowledgments

A

One of the main controls used in data mapping; acts as an audit trail for EDI transactions

56
Q

3 primary dimensions of a project

A

Deliverables
Allocated resources
Delivery time

57
Q

EUCs may not be subject to

A

Testing and IT general controls

58
Q

When using agile development, what should be found during review

A

Postiteration reviews that identify lessons learned for future use in the project

CISA (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions