VU Duniya

CS507 Final term Solved Paper 2010-2

2012-09-03T20:12:00.000+05:00

FINALTERM EXAMINATION

Spring 2010-07

CS507- Information Systems

Time: 90 min

M a r k s: 60

Question No: 1 ( M a r k s: 1 ) http://vuzs.net
Small organizations usually have complex management structure.

► True
► False
Small organizations usually have simple management structure.

Question No: 2 ( M a r k s: 1 ) http://vuzs.net
A hierarchical organization is structured in a way such that every entity in the organization, except one, is subordinate to a single other entity.

► True
► False

A hierarchical organization is organization structured in a way such that every entity in the organization, except one, is subordinate to a single other entity.

Question No: 3 ( M a r k s: 1 ) http://vuzs.net
Past court decisions have stated that privacy must be balanced against the needs of society.

► True
► False
Employers have been successful in making these arguments when aggrieved workers have filed lawsuits for privacy violations. The few court cases have largely been decided in the employers' favor.

Question No: 4 ( M a r k s: 1 ) http://vuzs.net
Business is a system where management decisions are influenced by or have an influence on suppliers, customers, society as a whole.

► True
► False
Business is a system where management decisions are influenced by or have an influence on suppliers, customers, society as a whole.

Question No: 5 ( M a r k s: 1 ) http://vuzs.net
Customer touch point is a method of interaction with a customer, such as telephone, e-mail, a customer service or help desk, conventional mail, Web site and store.

► True
► False
A customer touch point is a method of interaction with a customer, such as telephone, e-mail, a customer service or help desk, conventional mail, Web site and store.

Question No: 6 ( M a r k s: 1 ) http://vuzs.net
Which of the following functions provide such data as sales prospect and contact information, product information, product configurations and sales quotes?

► Sales force automation (SFA)
► CRM
► ERP
► MIS

Sales force automation (SFA) functions provide such data as sales prospect and contact information, product information, product configurations and sales quotes.

Question No: 7 ( M a r k s: 1 ) http://vuzs.net
A ________ is an agreed-upon set of conventions that defines the rules of communication.

► Protocol
► Interconnection Medium
► Data Packet
► Message
Control Protocol (TCP) and the Internet Protocol (IP). They are referred to frequently as TCP/IP. A protocol is an agreed-upon set of conventions that defines the rules of communication.

Question No: 8 ( M a r k s: 1 ) http://vuzs.net
----------is a type of computer software that facilitates group decision-making within an organization

► EMS
► DSS
► MIS
An electronic meeting system (EMS) is a type of computer software that facilitates group decision-making.

Question No: 9 ( M a r k s: 1 ) http://vuzs.net

The identification of risks should start with:

► Description of the internal and external risks

► A brainstorming session with risk management experts and a program profile

► A good understanding of the program and a brainstorming session with key stakeholders

► Definitions of likelihood and impact

Identification of project risks is usually accomplished via a brainstorming session that includes the development team and the stakeholders. Including stakeholders in this process is essential for fostering good communication and gaining a true understanding of the business risks associated with the project

Question No: 10 ( M a r k s: 1 ) http://vuzs.net
Automated data are less susceptible to destruction and misuse than paper data.

► True
► False
Electronic data are more susceptible to destruction fraud error and misuse because information systems concentrate data in computer files that
have the potential to be accessed by large numbers of people and by groups outside of the organizations.

Question No: 11 ( M a r k s: 1 ) http://vuzs.net
Wireless computing devices are not subject to viruses.

► False
► True
Hackers and Viruses

Sources of computer viruses:

Through the Internet

Through wireless computing devices

Question No: 12 ( M a r k s: 1 ) http://vuzs.net
The purpose of a class is to specify a classification of objects and to specify the features that characterize the structure and behavior of those objects.

► True
► False
“The purpose of a class is to specify a classification of objects and to specify the features that characterize
the structure and behavior of those objects.” Page 119

Question No: 13 ( M a r k s: 1 ) http://vuzs.net
Null value may or may not be called zero value.

► True
► False
Null is a blank read as zero value.

Question No: 14 ( M a r k s: 1 ) http://vuzs.net
Existence of functional departments in each organization may vary with the nature of industry and the nature of products/services being offered.

► True
► False
Existence of Functional departments in every organization vary with the nature of industry and the nature of products/services being offered.

Question No: 15 ( M a r k s: 1 ) http://vuzs.net
RAID model combines the elements of the waterfall model with the philosophy of prototyping.

► True
► False
Incremental Model: This model combines the elements of the waterfall model with the philosophy of prototyping.

Question No: 16 ( M a r k s: 1 ) http://vuzs.net
_________ means information hiding.

► Inheritance
► Encapsulation
► Class
Encapsulation means information hiding.

Question No: 17 ( M a r k s: 1 ) http://vuzs.net
Testing is easy for the software that is developed using OOAD due to use of ___________

► Modular approach
► Real time modeling
► Usability feature
Object-oriented programming, a modular approach to computer program (software) design.

Question No: 18 ( M a r k s: 1 ) http://vuzs.net
Characteristics of object are called ________

► Methods
► Attributes
► Status
Attributes are the characteristics of object / class and methods are the operations related to the object / class.

Question No: 19 ( M a r k s: 1 ) http://vuzs.net
An event-oriented log usually contain records describing system events, application events, or user events.

► True
► False
An event-oriented log ---- this usually contain records describing system events, application events, or user events.

Question No: 20 ( M a r k s: 1 ) http://vuzs.net
An information technology (IT) audit is an Examination of the controls within an entity’s Information technology infrastructure .

► True
► False
An information technology (IT) audit or information systems (IS) audit is an examination of the controls within an entity's Information technology infrastructure.

Question No: 21 ( M a r k s: 1 ) http://vuzs.net
In assessing risks for an IT system, _______________ is the first step.

► To define the scope of the effort.
► Vulnerability Assesment
► threat identification
In assessing risks for an IT system, the first step is to define the scope of the effort.

Question No: 22 ( M a r k s: 1 ) http://vuzs.net
Risk Management includes assessment of controls already been implemented or planned, probability that they can be broken, assessment of potential loss despite such controls existing.

► True
► False
Control Analysis: This phase includes assessment of controls already been implemented or planned, probability that they can be broken, assessment of potential loss despite such controls existing.

Question No: 23 ( M a r k s: 1 ) http://vuzs.net
Access Control refers to the process of identifying attempts to penetrate a system and gain unauthorized access.

► True
► False
Access Controls: Controlling who can access the system.

Question No: 24 ( M a r k s: 1 ) http://vuzs.net
“M-Commerce” stands for Mobile Commerce.

► True
► False
M-Commerce (mobile commerce) refers to the conduct of e-commerce via wireless devices.

Question No: 25 ( M a r k s: 1 ) http://vuzs.net
Past court decisions have stated that privacy must be balanced against the needs of ethics.

Question No: 26 ( M a r k s: 1 ) http://vuzs.net
Which of the following is the primary method for keeping a computer secure from intruders?

► Password
► Antivirus
► Scanners
► Firewall
Firewall is the primary method for keeping a computer secure from intruders.

Question No: 27 ( M a r k s: 1 ) http://vuzs.net
__________ is an association among entities. There has to be a relationship between two entities

► Value Sets
► Cardinality
► Relationships
A relationship is an association among entities. There has to be a relationship between two entities.

Question No: 28 ( M a r k s: 1 ) http://vuzs.net
____________ are the symbols indicates the flow of the procedure being explained.

► Entity Relationship Diagram
► DFD
► Flowchart

Symbols used for flow charts:
Arrow: The symbol indicates the flow of the procedure being explained.

Question No: 29 ( M a r k s: 1 ) http://vuzs.net
To accept the potential risk and continue operating the IT system or to implement controls to lower the risk to an acceptable level is called as ---------------.

► Risk Planning
► Risk Assumption
► Risk Limitation
► None of the above
Risk assumption: To accept the potential risk and continue operating the IT system or to implement controls to lower the risk to an acceptable level.

Question No: 30 ( M a r k s: 1 ) http://vuzs.net
RAID models based on producing deliverables frequently/repetitively

► True
► False
Iterative models are an approach for developing systems based on producing deliverables frequently/repetitively.

Question No: 31 ( M a r k s: 2
What should be the basic objective of an organization in your opinion?

Answer:

The basic objective of an organization is to make a profit and get a sustainable
Competency.

Question No: 32 ( M a r k s: 2
Why we need to secure information systems?

Answer:

Importance of Security

Sound security is fundamental to achieving this assurance. Furthermore, there is a need for organizations to protect themselves against the risks inherent with the use of information systems while simultaneously recognizing the benefits that can accrue from having secure information systems. Thus, as dependence on information systems increases, security is universally recognized as a pervasive, critically needed, quality.

Question No: 33 ( M a r k s: 2
Define intrusion detection

Answer:

Intrusion detection

Intrusion detection refers to the process of identifying attempts to penetrate a system and gain unauthorized access.

Question No: 34 ( M a r k s: 2
Identify components of Intrusion detection system

Answer:

Components of an IDS

An IDS comprise of following components:

• Sensors

• Analyzers

• An administrative console

• A user interface.

Question No: 35 ( M a r k s: 3 )
How can we make our password secure

Answer:

Best Password practices

• Keep the password secret – do not reveal it to anyone

• Do not write it down – if it is complex, people prefer to save it in their cell phone memory, or write on a piece of paper, both of these are not preferred practices.

• Changing password regularly – Passwords should be associated with users not machines.

Password generation program can also be used for this purpose.

• Be discreet – it is easy for the onlookers to see which keys are being used, care should be taken while entering the password.

• Do not use obvious password – best approach is to use a combination of letters, numbers, upper case and lower case. Change passes word immediately if you suspect that anyone else knows it.

Question No: 36 ( M a r k s: 3 )
What are some of the things you should keep in mind when identifying risks?

Answer:

Risk Identification: Following points should be kept in mind when identifying risks:

Project risk management plan
Review the progress of your schedule
See what’s driving the project finish date
Review Projects costs
Spot risks using visual report
Create or update a baseline or interim plan
Hide a column in a view

Question No: 37 (M a r k s: 3
Briefly describe Incremental Model.

Answer:

Incremental Models:

In incremental models, software is built not written. Software is constructed step by step in the same way a building is constructed. The products is designed, implemented, integrated and tested as a series of incremental builds, where a build consists of code pieces from various modules interacting together to provide a specific functional capability and testable as a whole.

Question No: 38 ( M a r k s: 3 )
Information system security association of USA has listed many ethical challenges, identify any three of them?

Answer:

Ethical Challenges:

Information system security association of USA has listed down following ethical challenges:

1. Misrepresentation of certifications, skills

2. Abuse of privileges

3. Inappropriate monitoring

4. Withholding information

5. Divulging information inappropriately

6. Overstating issues

7. Conflicts of interest

8. Management / employee / client issues

Question No: 39 ( M a r k s: 5 )
What do you think what are the key benefits of Ecommerce to organizations?

Answer:

E Commerce is one of the most important facets of the Internet to have emerged in the recent times. Ecommerce or electronic commerce involves carrying out business over the Internet with the assistance of computers, which are linked to each other forming a network. To be specific ecommerce would be buying and selling of goods and services and transfer of funds through digital communications.

Following are the benefits of Ecommerce:

Expanded Geographical Reach
Expanded Customer Base
Increase Visibility through Search Engine Marketing
Provide Customers valuable information about your business
Available 24/7/365 - Never Close
Build Customer Loyalty
Reduction of Marketing and Advertising Costs
Collection of Customer Data.

Question No: 40 ( M a r k s: 5 )
What do you understand by Disaster Recovery Planning?

Answer:

The disaster recovery plan is used to recover a facility rendered inoperable, including relocating operation into a new location. Disaster recovery planning is a subset of a larger process known as business continuity planning and should include planning for resumption of applications, data, hardware, communications (such as networking) and other IT infrastructure.

CS507 Final term Solved Paper 2010-1

2012-09-03T20:09:00.000+05:00

FINALTERM EXAMINATION

Spring 2010

CS507- Information Systems

Time: 90 min

M a r k s: 60

Question No: 1 ( M a r k s: 1 ) http://vuzs.net

Information technology can lead to a decrease in the time for decision making.

► True

► False

Question No: 2 ( M a r k s: 1 ) http://vuzs.net

Customer touch point is a method of interaction with a customer, such as telephone, e-mail, a customer service or help desk, conventional mail, Web site and store.

► True

► False

A customer touch point is a method of interaction with a customer, such as telephone, e-mail, a customer service or help desk, conventional mail, Web site and store.

Question No: 3 ( M a r k s: 1 ) http://vuzs.net

---------infrastructure consists of the physical facilities services and management that support all computing resources in an organization

► Information

► Decision

► Management

Information infrastructure consists of the physical facilities services and management that support l computing resources in an organization.

Question No: 4 ( M a r k s: 1 ) http://vuzs.net

Which of the following refers to the process of identifying attempts to penetrate a system and gain unauthorized access?

► Intrusion detection

► Audit Trial

► Control Trial

► Documentation

Intrusion detection refers to the process of identifying attempts to penetrate a system and gain unauthorized access.

Question No: 5 ( M a r k s: 1 ) http://vuzs.net

The departmental structures are --------------- in banking and financial sector.

► Different

► Same

► Mixed

The departmental structures are different in banking and financial sector.

Question No: 6 ( M a r k s: 1 ) http://vuzs.net

Input controls monitor the initial handshaking procedure of the user with the operating system.

► True

► False

Access controls monitor the initial handshaking procedure of the user with the operating system.

Question No: 7 ( M a r k s: 1 ) http://vuzs.net

Logical intrusion skills needed to exploit logical exposures are more technical and complex as compared to physical exposures.

► True

► False

Logical intrusion: The skills needed to exploit logical exposures are more technical and complex as compared to physical exposures. Generally a similar term used in relation to logical intrusion is hacking.

Question No: 8 ( M a r k s: 1 ) http://vuzs.net

MIS and DSS can be seen as having a systematic approach towards problem solution.

► True

► False

MIS and DSS can be seen as having a systematic approach towards problem solution.

Question No: 9 ( M a r k s: 1 ) http://vuzs.net

The protection of the interests of those relying on information, and the information systems and communications that delivers the information, from harm resulting from failures of availability, confidentiality, and integrity.

► False

► True

“The protection of the interests of those relying on information, and the information systems and communications that delivers the information, from harm resulting from failures of availability, confidentiality, and integrity.”

Question No: 10 ( M a r k s: 1 ) http://vuzs.net

Which of the following are knowledge workers who facilitate the development of information systems and computer applications by bridging the communications gap that exists between non-technical system users, and System designers and developers?

► System Analysts

► Software Engineers

► System Designers

► Chief Executives

Systems Analyst: “These are knowledge workers who facilitate the development of information systems and computer applications by bridging the communications gap that exists between non-technical system users, and System designers and developers.”

Question No: 11 ( M a r k s: 1 ) http://vuzs.net

______ is defined as “all elements that exist outside the boundary of the organization.

► Size

► Business Environment

► Business Structure

Business Environment is defined as “all elements that exist outside the boundary of the business (Organization).

Question No: 12 ( M a r k s: 1 ) http://vuzs.net

______ is the set of interconnected structural elements that provide the framework.

► Infrastructure

► System

► Organization

Ref: Infrastructure, generally, is the set of interconnected structural elements that provide the framework for supporting the entire structure. It usually applies only to structures that are artificial.

Question No: 13 ( M a r k s: 1 ) http://vuzs.net

Rectangle shape in the flow charts represents___________

► Decision

► Process

► Terminator

Question No: 14 ( M a r k s: 1 ) http://vuzs.net

Rounded shaped symbol in the flow chart is called ____________

► Connector

► Arrow

► Process

Question No: 15 ( M a r k s: 1 ) http://vuzs.net

__________ overwrites every program/software/file it infects with itself. Hence the infected file no longer functions.

► Dropper

► Overwriting Viruses

► Boot sector Virus
Overwriting Viruses: As the name implies, it overwrites every program/software/file it infects with itself. Hence the infected file no longer functions.

Question No: 16 ( M a r k s: 1 ) http://vuzs.net

Object oriented analysis focuses on the _________

►States of objects

► Collaboration of objects

► Implementation of objects

Object-oriented analysis focuses on the definition of classes and the manner in which they collaborate to effect the customer requirements.

Question No: 17 ( M a r k s: 1 ) http://vuzs.net

An information technology (IT) audit is an Examination of the controls within an entity’s Information technology infrastructure .

► True

► False
An information technology (IT) audit or information systems (IS) audit is an examination of thecontrols within an entity's Information technology infrastructure.

Question No: 18 ( M a r k s: 1 ) http://vuzs.net

Web Site monitoring is the process used to view or record both the keystrokes entered by a computer user and the computer's response during an interactive session.

► True

► False
Keystroke monitoring is the process used to view or record both the keystrokes entered by a computer user and the computer's response during an interactive session.

Question No: 19 ( M a r k s: 1 ) http://vuzs.net

A _______________ is the possibility of a problem, whereas a problem is a risk that has already occured.

► Risk

► Threat

► Intrusion

A risk is the possibility of a problem, whereas a problem is a risk that has already occurred.

Question No: 20 ( M a r k s: 1 ) http://vuzs.net

The two major criteria that are used to analyze risks are Operational Effects and Situational Impacts

► True

► False

Question No: 21 ( M a r k s: 1 ) http://vuzs.net

Access Control refers to the process of identifying attempts to penetrate a system and gain unauthorized access

► True

► False

Intrusion detection refers to the process of identifying attempts to penetrate a system and gain unauthorized access.

Question No: 22 ( M a r k s: 1 ) http://vuzs.net

“M-Commerce” stands for Mobile Commerce.

► True

► False

M-Commerce (mobile commerce) refers to the conduct of e-commerce via wireless devices.

Question No: 23 ( M a r k s: 1 ) http://vuzs.net

Organizational Development is one of the types of Change.

► True

► False

Types of Change

• Organizational Development

• Reengineering

Question No: 24 ( M a r k s: 1 ) http://vuzs.net

Preparing a situation for change by disconfirming existing attitudes and behaviors is called Unfreezing.

► True

► False

Unfreezing: Preparing a situation for change by disconfirming existing attitudes and behaviors.

Question No: 25 ( M a r k s: 1 ) http://vuzs.net

Which of the following activity consists of the discovery, modeling, specification and evaluation of requirements?

► Development

► Design

► Requirement

► Implementation

"The development activity consisting of the discovery, modeling, specification and evaluation of requirements,"

Question No: 26 ( M a r k s: 1 ) http://vuzs.net

Which of the following scans the operating system and application software for any virus based on the viruses they contain.

► Antivirus

► Scanners

► Active Monitors

► Firewall

Scanners: They scan the operating system and application soft ware for any virus based on the viruses they contain.

Question No: 27 ( M a r k s: 1 ) http://vuzs.net

__________ is an association among entities. There has to be a relationship between two entities

► Value Sets

► Cardinality

► Relationships

Relationships: A relationship is an association among entities. There has to be a relationship between two entities.

Question No: 28 ( M a r k s: 1 ) http://vuzs.net

A dropper is a program not a virus.

► True

► False

Dropper: A dropper is a program not a virus. It installs a virus on the PC while performing another function.

Question No: 29 ( M a r k s: 1 ) http://vuzs.net

Every decision we take in daily life requires some sort of data about the alternatives available.

► True

► False

Every decision we take in daily life requires some sort of information not data

Question No: 30 ( M a r k s: 1 ) http://vuzs.net

________________helps organization in gaining competitive advantage in the use of processes, effectiveness and efficiency.

► BPR

► CSF

► SPR

► MIS

Use of BPR helps an organization in gaining competitive advantage in the use of processes, effectiveness and efficiency should also be kept in mind.

Question No: 31 ( M a r k s: 2 )

What is cryptography?

Answer:

Cryptography means science of coded writing. It is a security defends to make information incomprehensible if unlawful persons cut off the transmission. When the information is to be used, it can be decoded. “The exchange of data into a secret code for the secure transmission over a public network is called cryptography.”

Question No: 32 ( M a r k s: 2 )

What do you understand by Intrusion Detection Systems?

Answer:

An ID is used in balance to firewalls. An IDS works in combination with routers and firewalls and it monitor network that how much it used and It protects a company’s information systems resources from external as well as internal mistreatment.

Question No: 33 ( M a r k s: 2 )

List information Requirements for Medium sizes organizations.

Answer:

Information Requirements of Medium Sized Organizations:

As size of the organization increases, the importance of planning for information also increases.
The planning on long-term basis also helps in monitoring of information against planning.

Question No: 34 ( M a r k s: 2 )

Define Dropper and Trojan horse ?

Answer:

Trojan horse: Trojan horse is like it executes by user the program written by the penetrate. The program undertakes illegal actions e.g. a copy of the sensitive data and files.

Dropper: A dropper is a program not a virus. It installs a virus on the PC while performing another function.

Question No: 35 ( M a r k s: 3 )

Designing file or database is a major component of system designing. Identify its basic purposes.

Answer:

Designing file or database

This serves following purposes:

• Data accessibility is ensured to the user is ensured as and when required.

• Data consistency – data updates in master file will automatically update the data in the whole system.

• Data is efficiently processed & stored.

• Data integrity that is Correctness of data is ensured.

Question No: 36 ( M a r k s: 3 )

What is the responsibility of the management of the organization to ensure the security of information systems?

Answer:

It is the responsibility of the management of the organization to ensure the security of information system. It must be sponsored by senior management. Management has a responsibility to ensure that the organization provides all secure information systems environment for users or customers. This will make users of information systems that are they feel secure and the importance of secure information environment.

Question No: 37 ( M a r k s: 3 )

Identify the information that is required before conducting an impact analysis?

Answer:

Impact analysis:

Before beginning the impact analysis, it is necessary to obtain the following necessary information:

• System mission

• System and data criticality

• System and data sensitivity

Question No: 38 ( M a r k s: 3 )

Define Reengineering?

Answer:

Reengineering: This is known as company transformation or business transformation. It is the more essential form of change management, since it works for all the elements of Processes or structures that have evolved over time.

Question No: 39 ( M a r k s: 5 )

Briefly discuss Risk Determination ?

Answer:

Risk Determination:

Risk determination means that phase of analyzing how much the information assets are uncovered to various threats known and thus count the loss cause to the asset through this threat. This phase relates to analysis of both physical and logical threats and comprises of four steps. Four steps are usually followed while analyzing the exposure.

The main reason of this step is to assess the level of risk to the IT system. The determination of exacting threat can be spoken as a meaning of

1 The likelihood of a given threat-source’s attempting to exercise a given weakness.

2. The magnitude of the impact should a threat source successfully exercise a susceptibility

3. The competence of planned or existing security controls for reducing or minimizing risk.

Question No: 40 ( M a r k s: 5 )

Discuss Technical Limitations of Ecommerce in comparison with Non-Technical Limitations in organizations ?

Answer:

Technical Limitations of Ecommerce in comparison with Non-Technical limitation in organization are that more cost to use for software and technology, reliability for certain processes.

Insufficient communications, the reason is that people don’t know about it. Software tools are not fixed and used in regular manner.

People don’t have enough access of internet and they have difficulty to adopt e-commerce infrastructure instead of organizational systems.

CS506 - Web Design and Development Papers

2012-09-03T14:36:00.000+05:00

Final term Papers:

CS506 Final term Subjective Paper 2012

CS506 Final term Subjective Solved by MOAAZ

CS506 Final term MCQs Solved by MOAAZ

CS506 Final term Subjective Mega File Papers 2012

CS506 Final term Subjective Papers 2012

CS506 Final term Paper Solved 2010

CS506 Final term Paper Solved 2008

Mid term Papers:

CS506 Mid term Subjective Paper 2012

CS506 Mid term Paper 2008

CS506 Mid term Paper Subjective 2011

CS504 - Software Engineering Papers

2012-09-02T23:50:00.000+05:00

Final term Papers

CS504 Final term Solved MCQs by MOAAZ

CS504 Final term Solved Subjective by MOAAZ

CS504 Final term Paper Subjective 2012

CS504 Final term Paper Subjectives 2012

CS504 Final term Subjective 2011

CS504 Final term Paper Solved 2010 - 3

CS504 Final term Solved Paper 2010 - 2

CS504 Final term Paper 2010

CS504 Final term Solved Subjective Papers

CS504 Final term Solved Paper 2010 - 1

Mid term Papers

CS504 Mid term Solved Subjective by MOAAZ

CS504 Mid term Solved MCQs by MOAAZ

CS504 Mid term Paper Subjective 2011

CS504 Mid term Paper Solved 2011

CS504 Mid term papers Sloved 2010 - 2

CS504 Mid term Paper Solved 2010 - 1

CS502 - Fundamentals of Algorithms Papers

2012-09-02T23:48:00.000+05:00

Final term Papers

CS502 Final term Solved paper 2010

CS502 Final term Subjective Paper - 1

CS502 Final term Subjective Paper - 2

CS502 Solved Final Term Subjective Paper

CS501 - Advance Computer Architecture Papers

2012-09-02T23:46:00.000+05:00

Final term Papers

Mid term Papers

CS410 - Visual Programming Papers

BNK601, BNK601 Related Past Papers

2012-09-02T15:45:00.000+05:00

BNK601 Banking Laws and Practice Papers

BNK601 Midterm 2010 Paper Solved

BNK603 - Consumer Banking Papers

BNK603 Midterm 2011 Paper Subjective Questions
BNK603 Final Term Paper 2010
BNK603 Final Term Paper 2011 - Consumer Banking
BNK603 Midterm 2011 Paper
BNK603 Final Term Paper July 2011

CS101 Midterm and Final term Papers

2012-09-02T15:39:00.000+05:00

Final Term papers

MID TERM PAPERS

CS507 Final term Solved Paper 2008-3

2012-09-02T15:30:00.000+05:00

FINALTERM EXAMINATION

Spring 2008

CS507- Information Systems

Time: 90 min

M a r k s: 60

Question No: 1 ( M a r k s: 1 ) http://vuzs.net

In which of the following category information is presented in its original form,

neither interpreted nor condensed nor evaluated by other writers?

Primary Information

Tertiay Information

Secondary Information

All of above

Primary sources: They present information in its original form, neither interpreted nor condensed nor evaluated by other writers.

Question No: 2 ( M a r k s: 1 ) http://vuzs.net

Ethical issues may be categorized into which of the following types?

Privacy

Accuracy

Property

All of above

There are certain aspects which when put together formulate a set of ethical issues. These are:

1. Privacy issues

2. Accuracy issues

3. Property issues

4. Accessibility issues

Question No: 3 ( M a r k s: 1 ) http://vuzs.net

After her third data processing clerk showed up at work with wrist braces, Ms. Jackson called a specialty firm to assess the design of their work environment. This firm specializes in _____:

Video display terminals

Ergonomics

Lighting

Furniture layout

Ergonomists study human capabilities in relationship to work demands.

Question No: 4 ( M a r k s: 1 ) http://vuzs.net

A person or a team who leads a change project or business-wide initiative by defining, researching, planning, building business support and carefully selecting volunteers to be part of a change team.

True

False

Change agents: A person or a team who leads a change project or business-wide initiative by defining, researching, planning, building business support and carefully selecting volunteers to be part of a change team.

Question No: 5 ( M a r k s: 1 ) http://vuzs.net

Leading ERP software vendors include SAP (SAP R/3), Oracle and PeopleSoft.

True

False

ERP software vendors, SAP R/3 and Oracle, have developed university alliance programs to help universities incorporate ERP software.

Question No: 6 ( M a r k s: 1 ) http://vuzs.net

What are the steps and their order in EC order fulfillment?

Ensuring payment, checking availability, arranging shipment, insurance,

production, purchasing & warehousing, contacts with customers and returns

Ensuring payment, checking availability, arranging shipment, insurance, production, purchasing & warehousing, and contacts with customers

Ensuring payment, checking availability, arranging shipment, insurance, production, plant services, purchasing & warehousing, and contacts with customers

Ensuring payment, checking availability, arranging shipment, insurance, production, plant services, purchasing & warehousing, contacts with customers and returns

The order for fulfillment process has nine steps: The steps include: making sure the customer will pay, checking for in-stock availability, arranging shipments, insurance, production, plant services, purchasing and warehousing, contacts with customers, and returns.

Question No: 7 ( M a r k s: 1 ) http://vuzs.net

With a ----------------decision environment, there is the possibility of having very quick and very accurate feedback on the decision process.

Closed-loop

Open-loop

Closed System

With a closed-loop decision environment, there is the possibility of having very quick and very accurate feedback on the decision process.

Question No: 8 ( M a r k s: 1 ) http://vuzs.net

The major purpose of enhancing web security is to protect web server from attacks through the use of internet.

True

False

The major purpose of enhancing web security is to protect web server from attacks through the use of internet.(Page No.180)

Question No: 9 ( M a r k s: 1 ) http://vuzs.net

Which of the following usually contain records describing system events, application events, or user events?

An event-oriented log

A record of every keystroke

Option a and b

None of these

An event-oriented log ---- this usually contain records describing system events, application events, or user events.

Question No: 10 ( M a r k s: 1 ) http://vuzs.net

Which of the following is the science and art of transforming messages to make them secure and immune to attacks?

Cryptography

Crypto analysis

Decryption

All of these

Cryptography is the science and the art of transforming messages to make them secure and immune to attacks.

Question No: 11 ( M a r k s: 1 ) http://vuzs.net

Crypto Analysis is the science and art of transforming messages to make them secure and immune to attacks.

False

True

Cryptography is the science and the art of transforming messages to make them secure and immune to attacks.

Question No: 12 ( M a r k s: 1 ) http://vuzs.net

Which of the following focus on detecting potentially abnormal behavior in function of operating system or request made by application software?

Scanners

Anti virus

Behavior blockers

Active Monitors

Behavior blockers: Focus on detecting potentially abnormal behavior in function of operating system or request made by application software.

Question No: 13 ( M a r k s: 1 ) http://vuzs.net

Which of the following is the primary method for keeping a computer secure

from intruders?

Anti virus

Scanners

Firewall

Password

Firewall is the primary method for keeping a computer secure from intruders.

Question No: 14 ( M a r k s: 1 ) http://vuzs.net

In case of logical intrusion, the intruder might be trying to have an unauthorized access to the system.

True

False

In case of logical intrusion, the intruder might be trying to have an unauthorized access to the system. The purpose could be damaging or stealing data, installation of bug or wire tapping -- Spying on communication within the organization.

Question No: 15 ( M a r k s: 1 ) http://vuzs.net

A denial-of-service attack floods a Web site with so many requests for services that it slows down or crashes.

True

False

Denial of Service, in the context of an attack on a website, means flooding the server with so much (fake) crap that it cannot process the legitimate requests of real visitors.

Question No: 16 ( M a r k s: 1 ) http://vuzs.net

The main source of bugs in computer programs is the complexity of decision-making code.

True

False

The main source of bugs is the complexity of decision-making code. Even a relatively small program of several hundred lines will contain tens of decisions leading to hundreds or even thousands of different paths.

Question No: 17 ( M a r k s: 1 ) http://vuzs.net

Which of the following is some action or event that can lead to a loss?

Threat

Damage

Accident

None of above

“A threat is some action or event that can lead to a loss.”

Question No: 18 ( M a r k s: 1 ) http://vuzs.net

The damage caused by the intrusion is referred as the:

Threats

Damages

Physical Threats

Logical Threats

Damage caused by intrusion by some undetected threat.

Question No: 19 ( M a r k s: 1 ) http://vuzs.net

Which of the following is an object that exists and is distinguishable from other objects?

Entity

Attribute

Object

Instance

An entity is an object that exists and is distinguishable from other objects.

Question No: 20 ( M a r k s: 1 ) http://vuzs.net

The emerging class of applications focuses on personalized decision support

TRUE

FALSE

Emerging class of applications focuses on personalized decision support, modeling,

information retrieval, data warehousing, what-if scenarios, and reporting.

Question No: 21 ( M a r k s: 1 ) http://vuzs.net

Decision making is the cognitive process of selecting a course of action from among ----------- alternatives.

Multiple

Double

Triple

Decision making is the cognitive process of selecting a course of action from among multiple alternatives.

Question No: 22 ( M a r k s: 1 ) http://vuzs.net

MIS is the primary source for the managers to be aware of red-alerts.

TRUE

FALSE

Intelligence: Identifying the problems occurring in an organization. MIS is the primary source for the managers to be aware of red-alerts.

Question No: 23 ( M a r k s: 1 ) http://vuzs.net

In __________ final product is intangible

Service sector

Manufacturing Sector

Trading sector

Service Sector: Final product is intangible, so information is critical at various steps, e.g. preparation, delivery and customer.

Question No: 24 ( M a r k s: 1 ) http://vuzs.net

Which of the following model combines the elements of the waterfall model with the philosophy of prototyping?

Iterative

Incremental

Raid

Incremental Model: This model combines the elements of the waterfall model with the philosophy of prototyping.

Question No: 25 ( M a r k s: 1 ) http://vuzs.net

Operations are usually called via _______

Functions

Signatures

Methods

Operation called only via valid operation signature.

Question No: 26 ( M a r k s: 1 ) http://vuzs.net

Control Trial can be used together with access controls to identify and provide information about users suspected of improper modification of data.

True

False

Audit trails can be used together with access controls to identify and provide information about users suspected of improper modification of data.

Question No: 27 ( M a r k s: 1 ) http://vuzs.net

Risk Management includes assessment of controls already been implemented or planned, probability that they can be broken, assessment of potential loss despite such controls existing.

True

False

Control Analysis: This phase includes assessment of controls already been implemented or planned, probability that they can be broken, assessment of potential loss despite such controls existing.

Question No: 28 ( M a r k s: 1 ) http://vuzs.net

A _______________ is the possibility of a problem, whereas a problem is a risk that has already occured.

Risk

Threat

Intrusion

A risk is the possibility of a problem, whereas a problem is a risk that has already occurred.

Question No: 29 ( M a r k s: 1 ) http://vuzs.net

A Protocol is an agreed-upon set of conventions that defines the rules of communication.

True

False

Control Protocol (TCP) and the Internet Protocol (IP): They are referred to frequently as TCP/IP. A protocol is an agreed-upon set of conventions that defines the rules of communication.

Question No: 30 ( M a r k s: 1 ) http://vuzs.net

Benefits to ERP systems are that they can be extremely complex, expensive and time-consuming to implement.

True

False

These all are limitations of ERP system.

Question No: 31 ( M a r k s: 1 )

Define Risk Mitigation.

Answer:

Risk mitigation is a process that takes place after the process of risk assessment has been completed.

Question No: 32 ( M a r k s: 1 )

Identify types of change management.

Answer:

Types of change management:

1- Organizational Development

2- Re-engineering

Question No: 33 ( M a r k s: 2 )

Identify what information is needed before conducting an Impact analysis?

Answer:

Impact analysis:

Before beginning the impact analysis, it is necessary to obtain the following necessary information:

• System mission

• System and data criticality

• System and data sensitivity

Question No: 34 ( M a r k s: 2 )

Why process symbol is used in the Flow charts?

Answer:

Process symbol is used to indicate an activity undertaken or action done.

Question No: 35 ( M a r k s: 3 )

What are the objective/purposes of the DFDs?

Answer:

The purpose of data flow diagrams is to provide a linking bridge between users and systems developers. Data flow diagrams facilitate users to understand how the system operate. DFD’s also help developers to better understand the system which helps in avoiding delays in proper designing, development, etc. of projects.

Question No: 36 ( M a r k s: 3 )

What are hackers?

Answer:

A hacker is a person who attempts to invade the privacy of the system. In fact he attempts to gain un authorized entry to a computer system by circumventing the system’s access controls. Hackers are normally skilled programmers, and have been known to crack system passwords, with quite an ease.

Question No: 37 ( M a r k s: 3 )

Identify draw backs to ERP systems.

Answer:

Draw backs to ERP systems: ERP systems have evolved and have become very complex, offering a lot of useful features for all areas of a business operation, but there are also drawbacks.

1. Cost: · Usually, ERP solutions are very expensive and only large companies can afford them. Introducing an ERP system may also require additional acquisitions or modifications in the internal infrastructure of the company, so the implementation costs can rise considerably. Also, training of the employees will also be mandatory, which means further expenditure in order to have an effective working ERP system.

2. Time: The implementation of an ERP system is not a particularly time-consuming task, but training employees to correctly and effectively use the ERP system can be. They need to be well informed about the features and procedures, otherwise the whole ERP system will prove to be inefficient and the investment of money and time will be in vain.

3. Efficiency: Even though an ERP system should improve efficiency if implemented and used correctly, the training and adaptation period immediately following implementation could be rocky as the organization adjusts to the new ways.

4. Customization: ERP systems are either not very customizable, or customization involves a lot of time and money. Few systems are ready to use out-of-the-box. Some systems may also require other software programs, a fact that might make the processes more complicated or even impossible in some cases.

5. Data Integrity: Integrating an ERP system with other software might need the software to be modified. As a result of integration, security breaches and data leaks might appear. The effects of such data leaks can be disastrous.

Question No: 38 ( M a r k s: 5 )

How will you differentiate CSF from KPI? Discuss briefly.

Answer:

CSF vs. Key Performance Indicator

A critical success factor is not a key performance indicator or KPI. Critical Success Factors are elements that are vital for a strategy to be successful. A KPI measures the achievements.

The following example will clarify the difference. A CSF for improved sales may be adopting a new sales strategy through better and regularly arranged display of products in the shop windows. However, the KPI identified would be the increased/decreased Average Revenue Per Customer as a result of the strategy.

Key Performance Indicators directly or indirectly measure the results of implementation of Critical Success Factors. KPI’s are measures that quantify objectives and enable the measurement of strategic performance.

Question No: 39 ( M a r k s: 5 )

Identify and define the types of active attacks.

Answer:

Types of Active attacks:

Common form of active attacks may include the following:

• Masquerading – involves carrying out unauthorized activity by impersonating a legitimate user of the system.

• Piggybacking – involves intercepting communications between the operating system and the user and modifying them or substituting new messages.

• Spoofing – A penetrator fools users into thinking they are interacting with the operating system. He duplicates logon procedure and captures pass word.

• Backdoors/trapdoors – it allows user to employ the facilities of the operating system without being subject to the normal controls.

• Trojan Horse – Users execute the program written by the penetrator. The program undertakes unauthorized activities e.g. a copy of the sensitive data.

Question No: 40 ( M a r k s: 10 )

The concept of security applies to all information. Discuss what is the objective and scope of Security? What may be the security issues regarding information and what will be the management responsibility to resolve these issues?

Answer:

Security Objective:

Organization for Economic Cooperation & Development, (OECD) in 1992 issued “Guidelines for the Security of Information Systems”. These guidelines stated the security objective as “The protection of the interests of those relying on information, and the information systems and communications that delivers the information, from harm resulting from failures of availability, confidentiality, and integrity.”

The security objective uses three terms:

• Availability – information systems are available and usable when required;

• Confidentiality – data and information are disclosed only to those who have a right to know it.

• Integrity – data and information are protected against unauthorized modification (integrity).

The relative priority and significance of availability, confidentiality, and integrity vary according to the data within the information system and the business context in which it is used.

Scope of Security

The concept of security applies to all information. Security relates to the protection of valuable assets against loss, disclosure, or damage. Valuable assets are the data or information recorded, processed, stored, shared, transmitted, or retrieved from an electronic medium. The data or information must be protected against harm from threats that will lead to its loss, inaccessibility, alteration or wrongful disclosure.

Question No: 41 ( M a r k s: 10 )

What is polymorphism? Define with example.

Answer:

Polymorphism is a derived from Greek language meaning "having multiple forms". Polymorphism is the characteristic of being able to assign a different meaning or usage to something in different contexts - specifically, to allow an entity such as a variable, a method, or an object to have more than one form.

In computer science, polymorphism is a programming language feature that allows values of different data types to be handled using a uniform interface. The concept of parametric polymorphism applies to both data types and functions.

Examples:

Method Overloading: Method with same name but with different arguments is called method overloading.
Method Overriding: Method overriding occurs when child class declares a method that has the same type arguments as a method declared by one of its super class.

CS507 Final term Solved Paper 2008-2

2012-09-02T15:22:00.000+05:00

FINALTERM EXAMINATION

Spring 2008

CS507- Information Systems

Time: 90 min

M a r k s: 60

Question No: 1 ( M a r k s: 1 ) http://vuzs.net

Factors of which of the following are basic elements of reducing manufacturing cost?

Brand

Cost

Production

Quality

Factors of production are basic elements of reducing manufacturing cost.

Question No: 2 ( M a r k s: 1 ) http://vuzs.net

ERP or enterprise systems control all major business processes with a single software architecture in real time.

True

False

ERP stands for “Enterprise Resource Planning”. A collection of software programs that tie together an enterprise's various functions, such as human resources, finance, marketing and sales.

Question No: 3 ( M a r k s: 1 ) http://vuzs.net

The bullwhip effect refers to erratic shifts in orders up and down the supply chain because of poor demand forecasting, price fluctuation, order batching, and

rationing within the chain.

True

False

The bullwhip effect refers to erratic shifts in orders up and down the supply chain because of poor demand forecasting, price fluctuation, order batching.

Question No: 4 ( M a r k s: 1 ) http://vuzs.net

The objective of the entire risk management process is that no one should hamper the working of the smooth working of IS.

True

False

The objective of the entire risk management process is that no one should hamper the working of the smooth working of IS.

Question No: 5 ( M a r k s: 1 ) http://vuzs.net

If an organization can tolerate some downtime, cold sites backup might be appropriate.

True

False

If an organization can tolerate some downtime, cold sites backup might be appropriate.

Question No: 6 ( M a r k s: 1 ) http://vuzs.net

Cryptography primarily consists of two basic processes.

True

False

Cryptography primarily consists of two basic processes.
• Encryption

• Decryption

Question No: 7 ( M a r k s: 1 ) http://vuzs.net

Logical intrusion skills needed to exploit logical exposures are more technical and complex as compared to physical exposures.

True

False

Question No: 8 ( M a r k s: 1 ) http://vuzs.net

Firewall is the primary method for keeping a computer secure from intruders.

True

False

Firewall is the primary method for keeping a computer secure from intruders.

Question No: 9 ( M a r k s: 1 ) http://vuzs.net

Where problem is recurring and repetitive, the common factors can be identified in order to identify a particular course of action is called --------------------------

Structured decisions

Unstructured decisions

Semi-Structured decisions

Structured decisions: Where problem is recurring and repetitive, the common factors can be identified in order to identify a particular course of action.

Question No: 10 ( M a r k s: 1 ) http://vuzs.net

The use of software routines to tie up the computer hosting a Web site that denies legitimate visitor's access is called:

denial of service.

hacking.

spoofing

sniffing

A "denial-of-service" attack is characterized by an explicit attempt by attackers to prevent legitimate users of a service from using that service.

Question No: 11 ( M a r k s: 1 ) http://vuzs.net

Wireless computing devices are not subject to viruses.

True

False

Hackers and Viruses

Sources of computer viruses:

Through the Internet

Through wireless computing devices

Question No: 12 ( M a r k s: 1 ) http://vuzs.net

A security program is a series of ongoing regular periodic reviews conducted to ensure that assets associated with the information systems function are safeguarded adequately.

True

False

A security program is a series of ongoing regular periodic reviews conducted to ensure that assets associated with the information systems function are safeguarded adequately.”

Question No: 13 ( M a r k s: 1 ) http://vuzs.net

The Internet's technological success does not depend on its principal communication tools, the Transmission Control Protocol (TCP) and the Internet Protocol (IP).

True

False

The Internet's technological success depends on its principal communication tools, the Transmission Control Protocol (TCP) and the Internet Protocol (IP).

Question No: 14 ( M a r k s: 1 ) http://vuzs.net

Which of the following helps an organization in gaining competitive advantage in the use of processes, effectiveness and efficiency should also be kept in mind?

BPR

CSF

SPR

Use of BPR helps an organization in gaining competitive advantage in the use of processes, effectiveness and efficiency should also be kept in mind.

Question No: 15 ( M a r k s: 1 ) http://vuzs.net

Systems analysts work as a link between Business people, & Computer Programmers.

True

False

Systems analysts work as a link between Business people, & Computer Programmers.

Question No: 16 ( M a r k s: 1 ) http://vuzs.net

The First increment in incremental model is usually the core product which addresses the basic requirements of the system.

True

False

Ref: The first increment is usually the core product which addresses the basic requirements of the system.

Question No: 17 ( M a r k s: 1 ) http://vuzs.net

Which of the following is a form of automation where computers communicate work instructions directly to the manufacturing machinery?

CAD

CAM

CIM

Computer-aided manufacturing (CAM) is a form of automation where computers communicate work instructions directly to the manufacturing machiner.y

Question No: 18 ( M a r k s: 1 ) http://vuzs.net

Which of the following phase of decision making process involves searching for conditions in the environment that call for decisions?

Intelligence

Design

Choice

Implementation

Intelligence – searching for conditions in the environment that call for decisions

Question No: 19 ( M a r k s: 1 ) http://vuzs.net

Computer programmers apply information technology to build information systems which solves these problems but need not fully understand the business usages they are computerizing or supporting.

True

False

Why do we need Systems Analysts?

Computer programmers apply information technology to build information systems which solves these problems but need not fully understand the business usages they are computerizing or supporting.

Question No: 20 ( M a r k s: 1 ) http://vuzs.net

Rectangle shape in the flow charts represents___________

Decision

Process

Terminator

Question No: 21 ( M a r k s: 1 ) http://vuzs.net

__________ is a person who attempts to invade the privacy of the system.

Hacktivsts

Hackers

Crackers

A hacker is a person who attempts to invade the privacy of the system.

Question No: 22 ( M a r k s: 1 ) http://vuzs.net

Characteristics of object are called ________

Methods

Attributes

Status

Attributes are the characteristics of object / class and methods are the operations related to the object / class.

Question No: 23 ( M a r k s: 1 ) http://vuzs.net

Operations are usually called via _______

Functions

Signatures

Methods

Operation called only via valid operation signature.

Question No: 24 ( M a r k s: 1 ) http://vuzs.net

Web Site monitoring is the process used to view or record both the keystrokes entered by a computer user and the computer's response during an interactive session.

True

False

Keystroke monitoring is the process used to view or record both the keystrokes entered by a computer user and the computer's response during an interactive session.

Question No: 25 ( M a r k s: 1 ) http://vuzs.net

Likelihood Determination phase sometimes determines that a potential vulnerability could not be exercised by a given threat-source.

True

False

Likelihood Determination: This phase determines that a potential vulnerability could be exercised by a given threat-source.

Question No: 26 ( M a r k s: 1 ) http://vuzs.net

Active Attack is one of the types of Web Security information systems.

True

False

There is two major classes of security threats

• Passive Attacks

• Active Attacks

Question No: 27 ( M a r k s: 1 ) http://vuzs.net

Business-to-business EC (B2B) is one of the types of E-Commerce.

True

False

Business to Business (B2B) is a model to e-commerce where businesses conduct commerce amongst themselves over the Internet/Intranet.

Question No: 28 ( M a r k s: 1 ) http://vuzs.net

Collaborative commerce is one of the types of B2B.

True

False

In business-to-business (B2B) situations involving one or more partners, collaborative commerce can be used in product life-cycle management systems to reduce design time.

Question No: 29 ( M a r k s: 1 ) http://vuzs.net

ERP Systems control all major business processes with a single software architecture in real time.

True

False

Resource Planning (ERP) Control all major business processes with a single software architecture in real time.

Question No: 30 ( M a r k s: 1 ) http://vuzs.net

Temporal CSFs in an organization, results from _________

Economic changes

Technological changes

Internal needs and changes

Environmental changes

Temporal CSFs resulting from internal organizational needs and changes.

Question No: 31 ( M a r k s: 1 )

What is the purpose of line symbol in the Entity Relationship Diagram?

Answer

Lines link attributes to entity sets, entity sets to relationship sets (also represent roles).

Question No: 32 ( M a r k s: 1 )

What are the logical threats to the information systems?

Answer

This refers to damage caused to the software and data without physical presence. Examples are viruses and worms, logical intrusion commonly referred to as hacking.

Question No: 33 ( M a r k s: 2 )

What is an entity?

Answer

An entity is an object that exists and is distinguishable from other objects. An entity is described using a set of attributes. For example specific person, company, event, plant, crop, department, section, cost center.

Question No: 34 ( M a r k s: 2 )

Define CRM.

Answer:

Customer relationship management (CRM) is a widely-implemented strategy for managing a company’s interactions with customers, clients and sales prospects. It involves using technology to organize, automate, and synchronize business processes—principally sales activities, but also those for marketing, customer service, and technical support. The overall goals are to find, attract, and win new clients, nurture and retain those the company already has, entice former clients back into the fold, and reduce the costs of marketing and client service. Customer relationship management describes a company-wide business strategy including customer-interface departments as well as other departments. Measuring and valuing customer relationships is critical to implementing this strategy.

Question No: 35 ( M a r k s: 3 )

Identify basic steps to implement BPR.

Answer

Following steps should be followed to implement BPR:

• Break down the CSF’s into the key or critical business processes and gain process ownership.

• Break down the critical processes into sub-processes, activities and task and

form the teams around these.

• Re-design, monitor and adjust the process-alignment in response to difficulties in the change process.

Question No: 36 ( M a r k s: 3 )

Define Risk Determination. Identify its inputs and outputs.

Answer

Risk determination phase assesses the risk and level of risk to IT system.

The inputs of to this phase are

1. Likelihood of threat exploitation

2. Magnitude of impact

3. Adequacy of planned and current controls

The output is the determination of risk and associated risk levels.

Question No: 37 ( M a r k s: 3 )

Differentiate CRM from ERP

Answer

The difference between CRM and ERP is that CRM is more inward looking and is mainly used in the sales and marketing department, while ERP is outward looking and touches all departments.

CRM is generally project based, while ERP is sweeping in its focus.

Question No: 38 ( M a r k s: 5 )

How the likelihood is determined? Enlist the factors.

Answer

Likelihood Determination:

To derive an overall likelihood rating that indicates the probability that a potential value may be exercised within the construct of the associated threat environment, the following governing factors must be considered.

Threat-source motivation and capability
Nature of the vulnerability
Existence of effectiveness of current controls

Question No: 39 ( M a r k s: 5 )

What do you understand by Disaster Recovery Planning?

Answer

A disaster recovery plan is a comprehensive statement of consistent actions to be taken before, during and after a disaster. The plan should be documented and tested to ensure the continuity of operations and availability of critical resources in the event of a disaster.

Question No: 40 ( M a r k s: 10 )

How can we compute the expected loss? Discuss the occurrence of threats.

Answer

The amount of expected loss is computed through following formula:

A = B x C x D

1. A = Expected Loss.

2. B = Chances (in %) of threat occurrence.

3. C = Chances (in %) of Threat being successful.

4. D = Loss which can occur once the threat is successful.

Question No: 41 ( M a r k s: 10 )

How will you compare Integrated Systems to ERP?

Answer

Enterprise resource planning (ERP) integrates internal and external management information across an entire organization, embracing finance/accounting, manufacturing, sales and service, CRM, etc. Whereas system integration is bringing together the component subsystems into one system and ensuring that the subsystems function together as a system.

CS507 Final term Solved Paper 2008-1

2012-09-02T15:19:00.000+05:00

FINALTERM EXAMINATION

Spring 2008

CS507- Information Systems

Time: 90 min

M a r k s: 60

Question No: 1 ( M a r k s: 1 ) http://vuzs.net

A newspaper article is a primary source if it reports events, but a secondary source if it analyses and comments on those events.

True

False

A newspaper article is a primary source if it reports events, but a secondary source if it analyses and comments on those events.

Question No: 2 ( M a r k s: 1 ) http://vuzs.net

Factors of which of the following are basic elements of reducing manufacturing cost?

Cost

Production

Quality

Brand

Factors of production are basic elements of reducing manufacturing cost.

Question No: 3 ( M a r k s: 1 ) http://vuzs.net

Past court decisions have stated that privacy must be balanced against the needs of society.

True

False

Employers have been successful in making these arguments when aggrieved workers have filed lawsuits for privacy violations. The few court cases have largely been decided in the employers' favor.

Question No: 4 ( M a r k s: 1 ) http://vuzs.net

ERP s major objective is to tightly integrate the functional areas of the organization and to enable seamless information flows across the functional areas.

True

False

The major objective of ERP systems is to tightly integrate the functional areas of the organization.

Question No: 5 ( M a r k s: 1 ) http://vuzs.net

The bullwhip effect refers to erratic shifts in orders up and down the supply chain because of poor demand forecasting, price fluctuation, order batching, and rationing within the chain.

True

False

The bullwhip effect refers to erratic shifts in orders up and down the supply chain because of poor demand forecasting, price fluctuation, order batching.

Question No: 6 ( M a r k s: 1 ) http://vuzs.net

Business-to-business EC (B2B) is one of the types of ECommerce.

True

False

Explanation: Business to Business (B2B) is a model to e-commerce where businesses conduct commerce amongst themselves over the Internet/Intranet.

Question No: 7 ( M a r k s: 1 ) http://vuzs.net

Which of the following is not considered Risk Management?

On a daily basis, a manager analyses a situation and decides what actions should be taken, if any, given the uncertainties being faced.

Risk Management addresses actions to resolve a program's problems.

A systematic approach to setting the best course of action by identifying and acting on risk issues

An RBM tool that helps to address potential problems that could interfere with the achievement of results.

Question No: 8 ( M a r k s: 1 ) http://vuzs.net

Which of the following is a weakness that can be accidentally triggered or intentionally exploited?

Vulnerability

Threat Identification

Audit Trial

Likelihood Identification

Vulnerability is a weakness that can be accidentally triggered or intentionally exploited. This phase helps in building up a list of weaknesses and flaws that could be exploited by the potential threat sources.

Question No: 9 ( M a r k s: 1 ) http://vuzs.net

Which of the following is a logical record of computer activities, usage, processing pertaining to an operating or application system or user activities?

Audit trail

Control Log

Control trial

An audit trail is a logical record of computer activities/usage/processing pertaining to an operating or application system or user activities.

Question No: 10 ( M a r k s: 1 ) http://vuzs.net

Which of the following may include program code of application softwares, technical manuals, user manuals etc?

Documentation

Audit Trial

Control Trial

None of these

Documentation may include program code of application software’s, technical manuals, user manuals and any other system-related documentation.

Question No: 11 ( M a r k s: 1 ) http://vuzs.net

Documentation may include program code of application softwares, technical manuals, user manuals etc.

True

False

Documentation may include program code of application software’s, technical manuals, user manuals and any other system-related documentation.

Question No: 12 ( M a r k s: 1 ) http://vuzs.net

Accounts should have a control over various recording points in the entire process from procurement to finished good store room.

False

True

Accounts and Finance: Accounts should have a control over various recording points in the entire process from procurement to finished goods store room.

Question No: 13 ( M a r k s: 1 ) http://vuzs.net

Active Monitor software serves the concurrent monitoring as the system is being used.

True

False

Active Monitor: This software serves the concurrent monitoring as the system is being used.

Question No: 14 ( M a r k s: 1 ) http://vuzs.net

Which of the following is some action or event that can lead to a loss?

Threat

Damage

Accident

None of above

A threat is some action or event that can lead to a loss.”

Question No: 15 ( M a r k s: 1 ) http://vuzs.net

Which of the following is the characteristic of being able to assign a different meaning or usage to something in different contexts - specifically?

OOP

Polymorphism

Encapsulation

Inheritance

Polymorphism is the characteristic of being able to assign a different meaning or usage to something in different contexts - specifically, to allow an entity such as a variable, a method, or an object to have more than one form.

Question No: 16 ( M a r k s: 1 ) http://vuzs.net

The purpose of data flow diagrams is to provide a --------- between users and systems developers.

Linking bridge

Empty Space

Data Flows

Options a and b

The purpose of data flow diagrams is to provide a linking bridge between users and systems developers.

Question No: 17 ( M a r k s: 1 ) http://vuzs.net

If a flow chart become complex it is better to use connector symbols to reduce to number of flow lines.

True

False

Connectors: If the flowchart becomes complex, it is better to use connector symbols to reduce the number of flow lines.

Question No: 18 ( M a r k s: 1 ) http://vuzs.net

Information products made more valuable by their attributes, characteristics, or qualities

TRUE

FALSE

Information products made more valuable by their attributes, characteristics, or qualities.

Question No: 19 ( M a r k s: 1 ) http://vuzs.net

Commentaries are the example of _________ sources.

Primary

Tertiary

Secondary

Some examples of secondary sources:

1. bibliographies (may also be tertiary)

2. biographical works

3. commentaries

Question No: 20 ( M a r k s: 1 ) http://vuzs.net

Feed back is the integral part of the _______

Open system

Close System

Closed Loop System

Closed Loop System: A part of the output is fed back to the system to initiate control to change.

Question No: 21 ( M a r k s: 1 ) http://vuzs.net

The Iterative model emphasizes the need to go back and reiterate earlier steps a number of times as the project progresses.

True

False

The spiral model emphasizes the need to go back and reiterate earlier steps a number of times as the project progresses.

Question No: 22 ( M a r k s: 1 ) http://vuzs.net

Arrow is also called __________

Dotted line

Process

Flow line

Question No: 23 ( M a r k s: 1 ) http://vuzs.net

Rectangle shape in the flow charts represents___________

Decision

Process

Terminator

Question No: 24 ( M a r k s: 1 ) http://vuzs.net

__________ is a person who attempts to invade the privacy of the system.

Hacktivsts

Hackers

Crackers

A hacker is a person who attempts to invade the privacy of the system.

Question No: 25 ( M a r k s: 1 ) http://vuzs.net

_______ usually identified by the phrase "is a kind of”.

Inheritance

Class

Object

Inheritance: Inheritance is usually identified by the phrase "is a kind of.”

Question No: 26 ( M a r k s: 1 ) http://vuzs.net

Which of the following is a logical record of computer activities, usage, processing pertaining to an operating or application system or user activities?

Control Log

Control trial

Audit trail

An audit trail is a logical record of computer activities/usage/processing pertaining to an operating or application system or user activities.

Question No: 27 ( M a r k s: 1 ) http://vuzs.net

An event-oriented log usually contain records describing system events, application events, or user events.

True

False

An event-oriented log ---- this usually contain records describing system events, application events, or user events.

Question No: 28 ( M a r k s: 1 ) http://vuzs.net

Threat source motivation is an output for Likelihood determination

True

False

Likelihood Determination:

The input to this phase is

• Threat source motivation

Question No: 29 ( M a r k s: 1 ) http://vuzs.net

BPR’s major objective is to tightly integrate the functional areas of the organization and to enable seamless information flows across the functional areas.

True

False

The major objective of ERP systems is to tightly integrate the functional areas of the organization.

Question No: 30 ( M a r k s: 1 ) http://vuzs.net

Organizational Development is one of the types of Change.

True

False

Types of Change

• Organizational Development

• Reengineering

Question No: 31 ( M a r k s: 1 )

Define Risk Mitigation.

Answer:

Risk mitigation is a process that takes place after the process of risk assessment has been completed.

Question No: 32 ( M a r k s: 1 )

What are the value sets?

Answer:

Value sets: Each attribute has a Value Set (domain) i.e. defined parameters or the range in which value of the attribute may fall.

Question No: 33 ( M a r k s: 2 )

What are the purposes of the Objects?

Answer:

Objects serve two purposes, they promote understanding of the real world and provide a practical basis for computer implementation.”

Question No: 34 ( M a r k s: 2 )

What do you understand by Intrusion Detection Systems?

Answer:

Another element to securing networks is an intrusion detection system (IDS). IDS is used in balance to firewalls. An IDS works in combination with routers and firewalls and it monitor network that how much it used and it protects a company’s information systems resources from external as well as internal mistreatment.

Question No: 35 ( M a r k s: 3 )

Differentiate CRM from ERP

Answer:

ERP & CRM

Customer has become of critical importance in the modern day business. Early on, organizations used to focus more on how much has been sold what has been produced. But now the focus is quite different. Focus has been placed on the requirements of the customer, providing quality service and quickness of response to customer queries. Analysis of the customer data from their personal habits to spending one’s have become a crucial element of doing a successful business. ERP has this unique potential to improve the quality of customer handling.

Question No: 36 ( M a r k s: 3 )

What is the purpose of decision symbol in the flow chart?

Answer:

The symbol is used when a choice can be made between the options available.
Such options are mutually exclusive.
Only one flow line should enter a decision symbol, but two or three flow lines, one for each possible answer, should leave the decision symbol.

Question No: 37 ( M a r k s: 3 )

What are hackers?

Answer:

Question No: 38 ( M a r k s: 5 )

Identify the objective and scope of security.

Answer:

Security Objective:

The security objective uses three terms:

• Availability – information systems are available and usable when required;

• Confidentiality – data and information are disclosed only to those who have a right to know it.

• Integrity – data and information are protected against unauthorized modification (integrity).

The relative priority and significance of availability, confidentiality, and integrity vary according to the data within the information system and the business context in which it is used.

Scope of Security

Question No: 39 ( M a r k s: 5 )

Identify and define the types of active attacks.

Answer:

Active attacks:

After getting proper information about system in passive attacks intruder will obtain unauthorized access to modify data or programs, causing a denial of service, escalating privileges, accessing other systems. They affect the integrity, availability and authentication attributes of network security.

Types of Active attacks

Common form of active attacks may include the following:

• Masquerading – involves carrying out unauthorized activity by impersonating a legitimate user of the system.

• Piggybacking – involves intercepting communications between the operating system and the user and modifying them or substituting new messages.

• Spoofing – A penetrator fools users into thinking they are interacting with the operating system. He duplicates logon procedure and captures pass word.

• Backdoors/trapdoors – it allows user to employ the facilities of the operating system without being subject to the normal controls.(vuzs)

• Trojan Horse – Users execute the program written by the penetrator. The program undertakes unauthorized activities e.g. a copy of the sensitive data.

Question No: 40 ( M a r k s: 10 )

Differentiate the following :

Entity vs Entity Set

Encapsulation vs Inheritance

Answer:

Entity vs. Entity Set:

An entity is an object that exists and is distinguishable from other objects. An entity is described using a set of attributes. Whereas an entity set is a set of entities of the same type that share the same properties.

Encapsulation vs Inheritance:

Encapsulation means information hiding whereas Inheritance is usually identified by the phrase "is a kind of.”

Question No: 41 ( M a r k s: 10 )

There are many Internet Security Systems , one of them is Firewall System.

Explain in your own words what do you understand by Firewall and how it protects from Internet attacks?

Answer:

Firewall:

Firewall is the primary method for keeping a computer secure from intruders. A firewall allows or blocks traffic into and out of a private network or the user's computer. Firewalls are widely used to give users secure access to the Internet as well as to separate a company's public Web server from its internal network. Firewalls are also used to keep internal network segments secure.

In the home, a personal firewall typically comes with or is installed in the user's computer. Personal firewalls may also detect outbound traffic to guard against spy ware, which could be sending your surfing habits to a Web site. They alert you when software makes an outbound request for the first time. In the organization, a firewall can be a stand-alone machine or software in a server. It can be as simple as a single server or it may comprise a combination of servers each performing some type of firewall processing.

CS507 Midterm Subjective Paper 2012

2012-09-02T15:15:00.000+05:00

CS507 - Information Systems Midterm Subjective Paper May-2012

Total 26 question
MCQ’z = 20

MCQ’z mostly from past paper.

2 question (2 marks)

1) Objective of CRM?

2) How ERD is beneficial to system design?

2 question (3 marks)

1) Differentiate between physical and logical system with respect to design?

2) Roll ESS in organization?

2 question (5 marks)

1) Can we move into IT development through achieving organization corporate objective. Explain with the help of example?

2) Explain Knowledge/intelligent system in detail?

CS507 Midterm Paper 2011-2

2012-09-02T15:13:00.000+05:00

CS507 - Information Systems-Midterm-Subjective-Paper(2-12-2011)

In a system development what will be need and procedures of an organization? Support your answer with the help of an example.(5)

Explain why Group DSS is also called “computerized collaborative work system”.(5)

Identify the weakness of Incremental Model.(2)

Explain the role of ESS in organization.(2)

How can competitive tool affect the CBIS/IS?(2)

Enlist the consequences that arise from the decision making process?(2)

Can you write down the different departments used in an educational organization (like university)? (2)

CS507 Midterm Solved Paper 2011

2012-09-02T15:12:00.000+05:00

CS507 Midterm 2011 Paper