CS205 Quiz 1

Q1. In use case diagram, an ellipse signifies a(n):

1. class
2. use case
3. system boundary
4. actor

Correct answer: use case

Q2. At which stage of software development loop, results are delivered?

1. Technical development
2. Status quo
3. Problem definition
4. Solution integration

Correct answer: Solution integration

Q3. The project manager would need _________ document to monitor and track the progress of the project.

1. Planning
2. Requirement
3. Project
4. Design

Correct answer: Project

Q4. The context diagram is used as the top level abstraction in a _______ developed according to principles of structured analysis.

1. Dataflow diagram
2. USe Case Diagram
3. Activity Diagram
4. State Transition Diagram

Correct answer: Dataflow diagram

Q5. The data on which the program operates is also considered as part of the ________.

1. Utility Software
2. Logical Data
3. Important Data
4. Software

Correct answer: Software

Q6. Use case construction is a technique used for:

1. requirements structuring.
2. user interface design.
3. requirements determination.
4. database design.

Correct answer: requirements determination.

Q7. The condition that must be met before the use case can be invoked, is called:

1. Pre-Condition
2. Post-Condition
3. Pre-Assertion
4. Post-Assertion

Correct answer: Pre-Condition

Q8. Requirement engineering mainly deals with the _________ of the system.

1. Definition Phase
2. Maintenance Phase
3. Vision Phase
4. Development Phase

Correct answer: Definition Phase

Q9. The __________ relationship is kind of a generalization specialization relationship.

1. Binary
2. Uses
3. Bit-Byte
4. Extends

Correct answer: Extends

Q10. The process of utilizing our knowledge of computer science in effective production of software systems is called ________.

1. Electrical Engineering
2. Software Engineering
3. Chemical Engineering
4. Computer Engineering

Correct answer: Software Engineering

Q11. The information security transformation framework is recommended for_________________.

1. Research organizations and academia
2. Effective implementation of information security given the current challenges of information security in Pakistan
3. Information security governance
4. Military and law enforcement organizations

Correct answer: Effective implementation of information security given the current challenges of information security in Pakistan

Q12. Iso27001:2013 (isms) clause 5.1 talks about_________________.

1. None of the given
2. Internal audit
3. Policy, resources, continual improvement, quarterly board review
4. Policy and objectives, integration into processes, resources, communication, promoting continual improvement, intended outcomes

Correct answer: Policy and objectives, integration into processes, resources, communication, promoting continual improvement, intended outcomes

Q13. Security in the trenches refers to__________________.

1. A form of ransom ware
2. Most basic security hardening activities usually carried out by junior staff
3. Vulnerability management
4. Security intelligence

Correct answer: Most basic security hardening activities usually carried out by junior staff

Q14. What do you mean by RTO in a business continuity plan?

1. Minimum frequency of backups
2. Maximum age of files that an organization must recover from backup storage for normal operations to resume after disaster
3. Both a & b
4. Maximum downtime an organization can handle

Correct answer: Maximum downtime an organization can handle

Q15. One of the major challenges of information security in Pakistan is that it is_____________________.

1. Not funded adequately
2. Misunderstood
3. Reactive and superficial
4. Not considered important

Correct answer: Reactive and superficial

Q16. The key factor related to cloud, mobile, IOT, and social is that____________.

1. These new frontiers are not understood well
2. It has further complicated the already difficult task of achieving a strong security posture
3. Adoption is low
4. They are mainly being used in developing nations

Correct answer: It has further complicated the already difficult task of achieving a strong security posture

Q17. As per ISACA, risk___________________________.

1. A necessary part of the business
2. Is usually accomplished by ensuring that impact of threats exploiting vulnerabilities is within acceptable limits at an acceptable cost
3. Is a complex concept which only senior management should address at board level
4. Should be eliminated altogether for best security implementation

Correct answer: Is usually accomplished by ensuring that impact of threats exploiting vulnerabilities is within acceptable limits at an acceptable cost

Q18. Security governance simply means_________________.

1. Maintaining the security program
2. Policies and procedures
3. Initiating the security program
4. Managing the security program

Correct answer: Managing the security program