3.6.a : Quiz System Development Methodology (Doshi)

Question 1

An organization is developing one of its applications using agile approach. Which of the following would be a risk in agile development process?

A. Insufficient documentation.
B. Insufficient testing.
C. Poor requirements definition.
D. Insufficient user involvement.

Answer 1

A. Insufficient documentation.

Agile allows the programmer to just start writing a program without spending much time on preplanning documentation. Less importance is placed on formal paper-based deliverables, with the preference being to produce releasable software in short iterations, typically ranging from 4 to 8 weeks. Lack of testing might be an issue but without formal documentation it is difficult for an auditor to gather objective evidence.

Question 2

Which of the following is the characteristic of agile software development approach?

A. Systematic Documentation.
B. More importance is placed on formal paper-based deliverables.
C. Extensive use of software development tools to maximize team productivity.
D. Reviews at the end of each iteration to identify lessons learned for future use in the project.

Answer 2

D. Reviews at the end of each iteration to identify lessons learned for future use in the project.

Dictionary meaning of agile is ‘able to move quickly and easily’. Agile allows the programmer to just start writing a program without spending much time on preplanning documentation. Less importance is placed on formal paper-based deliverables, with the preference being to produce releasable software in short iterations, typically ranging from 4 to 8 weeks. At the end of each iteration, the team considers and documents what worked well and what could have worked better,
and identifies improvements to be implemented in subsequent iterations. Agile projects do make
use of suitable development tools; however, tools are not seen as the primary means of achieving
productivity.

Question 3

Which of the following is considered as limitation of the Agile Software development methodology?

A. Quality of system may be impacted due to speed of development and limited budget.
B. Absence of well-defined requirements may end up with more requirements than needed.
C. Absence of review mechanism to identify lesions learned for future use in the project.
D. Incomplete documentation due to time management.

Answer 3

D. Incomplete documentation due to time management.

In the above scenario, major risk associated with agile development is lack of documentation.

Question 4

An organization is developing one of its applications using prototyping approach. Which of the following would be an advantage of using prototyping for systems development?

A. Sufficient controls will be built in the system.
B. Sufficient audit trial will be built in the system.
C. Reduction in deployment time.
D. Sufficient change control will be built in the system

Answer 4

C. Reduction in deployment time.

A prototype is a small scale working system used to test the assumptions. Assumptions may be about user requirements, program design or internal logic. This method of system development can provide the organization with significant time and cost savings. Prototyping is the process of creating systems through controlled trial and error. By focusing mainly on what the user wants and sees, developers may miss some of the controls that come from the traditional systems development approach; therefore, a potential risk is that the finished system will have poor controls. In prototyping, changes in the designs and requirements occur quickly and are seldom documented or approved; hence, change control becomes more complicated with prototyped systems.

Question 5

An organization is developing one of its applications using prototyping approach. Which of the following testing methods is MOST effective during the initial phases of prototyping?

A. Bottom-up
B. Parallel
C. Volume
D. Top-down

Answer 5

D. Top-down

In any given scenario, Top-down testing methods is MOST effective during the initial phases of Prototyping. Top-down testing starts with the system’s major functions and works downward. The initial emphasis when using prototyping is to create screens and reports, thus shaping most of the proposed system’s features in a short period.

Question 6

Which of the following techniques uses a prototype that can be updated regularly to meet ever changing user or business requirements?

A. Reverse Engineering
B. Object-oriented system development (OOD)
C. Software reengineering (BPR)
D. Rapid application development (RAD)

Answer 6

D. Rapid application development (RAD)

RAD enables the organization to develop systems quickly while reducing development cost and maintaining quality. Rapid Application Development (RAD) uses a prototype approach that can be updated continually to meet changing user or business requirements.RAD uses prototyping as its core development tool no matter which underlying technology is used

Question 7

Which of the following is an advantage of prototyping?

A. Prototyping ensures strong internal controls.
B. Prototyping ensures significant time and cost savings.
C. Prototyping ensures strong change controls.
D. Prototyping ensures that extra functions are not added to the intended system.

Answer 7

B. Prototyping ensures significant time and cost savings.

Prototyping is the process of creating systems through controlled trial and error. Prototype systems can provide significant time and cost savings; however, other options are not the characteristics of prototyping. They often have poor internal controls, change control becomes much more complicated, and it often leads to functions or extras being added to the system that were not originally intend

Question 8

An organization is developing one of its applications using prototyping approach. Change control can be impacted by the:

A. involvement of user in prototyping.
B. rapid pace of modifications in requirements and design.
C. trial and error approach in prototyping.
D. absence of integrated tools.

Answer 8

B. rapid pace of modifications in requirements and design.

In prototyping, changes in the designs and requirements occur quickly and are seldom documented or approved; hence, change control becomes more complicated with prototyped systems. Choices A, C and D are characteristics of prototyping, but they do not have an adverse effect on change control.

Question 9

An organization considering development of system should use which of the below methodology to develop systems faster, reduce development costs, and still maintain high quality?

A. CPM
B. Rapid application development (RAD)
C. PERT
D. Function Point Analysis

Answer 9

B. Rapid application development (RAD)

-RAD enables the organization to develop systems quickly while reducing development cost and maintaining quality. This is achieved by use of below techniques:
-RAD includes use of:
· Small and well trained development teams.
· Prototypes
· Tools to support modelling, prototyping and component reusability.
· Central repository
· Rigid limits on development time frames

Question 10

Which of the following uses a prototype that can be updated continually to meet changing user or business requirements?

A. Critical Path Methodology (CPM)
B. Rapid application development (RAD)
C. Function point analysis (FPA)
D. Earned Value Analysis (EVM)

Answer 10

B. Rapid application development (RAD)

Explanation: Rapid application development (RAD) uses a prototype that can be updated continually to meet changing user or business requirements.

Question 11

Which of the following is the main advantage of rapid application development (RAD) over the traditional system development life cycle (SDLC)?

A. engages user in system development.
B. prioritizes testing of technical features.
C. simplifies conversion to the new system.
D. shortens the development time frame.

Answer 11

D. shortens the development time frame.

The greatest advantage of RAD is the shorter time frame for the development of a system. Choices A
and B are true, but they are also true for the traditional systems development life cycle. Choice C is not necessarily always true.

Question 12

Which of the following technology or approach will facilitate the speedy delivery of information systems to the business user community?

A. Business process reengineering (BPR)
B. Computer-aided software engineering (CASE)
C. Rapid application prototyping (RAP)
D. Waterfall Approach

Answer 12

C. Rapid application prototyping (RAP)

RAD enables the organization to develop systems quickly while reducing development cost and maintaining quality. This is achieved by use of below techniques:

(1) Small and well trained development teams.
(2) Prototypes
(3) Tools to support modeling, prototyping and component reusability.
(4) Central repository
(5) Rigid limits on development time frames

Question 13

Which of the following is a advantage of using of object-oriented development technique?

A. ability to reuse modules.
B. improvement in system performance.
C. increase control effectiveness.
D. rapid system development process.

Answer 13

A. ability to reuse modules.

One of the major benefits of object-oriented design and development is the ability to reuse modules. The other options are not normally benefit of the object-oriented technique.

Question 14

Which of the following is an object-oriented technology characteristic that permits an enhanced degree of security over data?

A. Inheritance
B. Dynamic warehousing
C. Encapsulation
D. Polymorphism

Answer 14

C. Encapsulation

OO uses a technique known as ‘encapsulation’ in which one object interacts with another object. This is a common practice whereby any particular object may call other object to perform its work. Encapsulation prevents accessing either properties or methods that have not been previously defined as public. This means that any implementation of the behaviour of an object is not accessible.

Question 15

In which of the below mentioned scenario, waterfall life cycle approach for system development is most likely to be used:

A. requirements are well defined and no changes are expected.
B. requirements are well defined and the project is subject to time pressures.
C. requirements are not finalized and subject to frequent changes.
D. the project will involve the use of new technology.

Answer 15

A. requirements are well defined and no changes are expected.

In any given scenario, waterfall approach is most suitable when requirements are well defined and understood and no major changes are expected. When requirements changes frequently, the waterfall model has not been successful. In these circumstances the various forms of iterative development life cycle gives the advantage of breaking down the scope of the overall system to be delivered, making the requirements gathering and design activities more manageable

Question 16

Which of the following technique is used to study an application or software to see how it functions and to use that information to develop a similar system?

A. Object oriented.
B. Reverse Engineering.
C. Software Reengineering.
D. Agile development

Answer 16

B. Reverse Engineering.

Reverse engineering is the process of studying and analyzing an application and the information is used to develop a similar system.

Question 17

Which of the following technique is used to enhance the system by extracting and reusing design and program components?

A. Object oriented.
B. Reverse Engineering.
C. Software Reengineering.
D. Agile development

Answer 17

C. Software Reengineering.

Reengineering is the process of updating an existing system by extracting and reusing design and program components. This process is used to support major changes in the way an organization operates.

Question 18

An IS auditor reviewing the system development approach should be concerned about:

A. UAT is managed by user group.
B. A quality plan is not part of the contracted deliverables.
C. Module is released in phases instead of full implementation.
D. Prototyping is used to ensure that system is aligned with business objectives.

Answer 18

B. A quality plan is not part of the contracted deliverables.

For better deliverable, a quality plan is an essential element of all projects. Detailed quality plan for the proposed development contract should be documented and should encompass all phases of the
development. UAT is normally managed by the user area to ensure systems are as per user requirements. If the system is large, a phased-in approach to implementing the application is a reasonable approach. Prototyping is a valid method to ensure that system is aligned with business
objectives.

Question 19

Which of the following is the MAJOR advantage of a component-based development?

A. ability to manage multiple data types.
B. ability to model complex relationships.
C. ability to meet the demands of a changing environment.
D. ability to support multiple development environments.

Answer 19

D. ability to support multiple development environments.

In any given scenario, the major advantage of a component-based development approach is the support of multiple development environments. Components written in one language can interact with components written in other languages or running on other machines, which can increase the speed of development. Software developers can then focus on business logic. The other choices are not the most significant advantages of a component-based development approach.

Question 20

Which of the following would be the IS auditor’s main concern while reviewing the business process reengineering process?

A. Appropriate Key controls are in place to protect assets and information resources.
B. Requirements of the new system are appropriately documented.
C. Time and resource budget is adhered to.
D. Roles and responsibilities assigned for new process.

Answer 20

A. Appropriate Key controls are in place to protect assets and information resources.

The audit team should be concerned about the key controls and verify that the controls are in place
before implementing the new process. Choices B, C and D are objectives that the BPR process should achieve, but they are not the auditor’s primary concern.

Question 21

An organization is implementing business process reengineering (BPR) project for its critical system. Which of the following is the impact of BPR?

A. business processes will remain stable.
B. information technologies will not change.
C. the process will improve performance of product & services.
D. input from clients and customers will no longer be necessary.

Answer 21

C. the process will improve performance of product & services.

As a reengineering process takes hold, certain key results will begin to emerge, including a concentration on process as a means of improving product, service and profitability. In addition, new business priorities and approaches to the use of information as well as powerful and more accessible information technologies will emerge. Often, the roles of client and customers will be redefined providing them with more direct and active participation in the enterprise’s business process.

Question 22

An organization is implementing business process reengineering (BPR) project for its critical system. Which of the following is the FIRST step?

A. Defining the scope and areas to be reviewed.
B. Designing a project plan.
C. Analyzing the process under review.
D. Reengineering the process under review

Answer 22

A. Defining the scope and areas to be reviewed.

First step will be to understand the scope and area for which BPR is required. On the basis of the definition of the areas to be reviewed, the project plan is developed. Thereafter, the process can be reengineered, implemented and monitored for continuous improvement.

Question 23

Which of the following represents a typical prototype of an interactive application?

A. Program logic and screens
B. Interactive Edits and Screens
C. Interactive edits program logic and sample reports
D. Screens, interactive edits, program logics and sample

Answer 23

B. Interactive Edits and Screens

Program logics are not produced by a prototyping tool. This often leads to confusion for the end user who expects quick implementation of program logics.

Question 24

Which of the following is a advantage of using of object-oriented development technique?

A. ability to reuse modules.
B. improvement in system performance.
C. increase control effectiveness.
D. rapid system development process.

Answer 24

?