It109_Q3

Front 1

Which of these are valid software configuration items?
a. case tools
b. documentation
c. executable programs
d. test data
e. All of the above

Back 1

e. All of the above

Front 2

Which of the following is not considered one of the four important elements that should exist when a configuration management system is developed?
a. component elements
b. human elements
c. process elements
d. validation elements

Back 2

d. validation elements

Front 3

Once a software engineering work product becomes a baseline it cannot be changed again. True or false?

Back 3

False

Front 4

Which configuration objects would not typically be found in the project database?
a. design specification
b. marketing data
c. organizational structure description
d. test plans
e. b and c

Back 4

e. b and c

Front 5

Modern software engineering practice suggests that a software team maintain SCI’s in a project database or repository. True or false?

Back 5

True

Front 6

A data repository metamodel is used to determine how
a. information is stored in the repository
b. well data integrity can be maintained
c. easily the existing model can be extended
d. all of the above

Back 6

d. all of the above

Front 7

Many data repository requirements are the same as those for a typical database application. True or false?

Back 7

True

Front 8

The ability to track relationships and changes to configuration objects is one of the most important features of the SCM repository. True or false?

Back 8

True

Front 9

Which of the following tasks is not part of software configuration management?
a. change control
b. reporting
c. statistical quality control
d. version control

Back 9

c. statistical quality control

Front 10

A basic configuration object is a ________________ created by a software engineer during some phase of the software development process.
a. program data structure
b. hardware driver
c. unit of information
d. all of the above

Back 10

c. unit of information

Front 11

A new _____________ is defined when major changes have been made to one or more configuration objects.
a. entity
b. item
c. variant
d. version

Back 11

d. version

Front 12

Change control is not necessary if a development group is making use of an automated project database tool. True or false?

Back 12

False

Front 13

When software configuration management is a formal activity, the software configuration audit is conducted by the
a. development team
b. quality assurance group
c. senior managers
d. testing specialists

Back 13

b. quality assurance group

Front 14

The primary purpose of configuration status reporting is to
a. allow revision of project schedule and cost estimates by project managers
b. evaluate the performance of software developers and organizations
c. make sure that change information is communicated to all affected parties
d. none of the above

Back 14

c. make sure that change information is communicated to all affected parties

Front 15

Configuration issues that need to be considered when developing WebApps include:
a. content
b. cost
c. people
d. politics
e. a, b, c

Back 15

e. a, b, c

Front 16

WebApp configuration objects can be managed in much the same way as conventional software configuration objects except of:
a. content items
b. functional items
c. graphic items
d. user items

Back 16

a. content items

Front 17

Content management establishes a process by which Web content is rendered on the user’s display screen. True or false?

Back 17

False

Front 18

Change management for WebApps is best handled in agile manner. True or false?

Back 18

True

Front 19

One reason that version control is difficult for WebApps is that in an uncontrolled environment, you can have multiple authors making changes to the same files from multiple locations without any realizing it. True or false?

Back 19

True

Front 20

Requiring developers to check Web configuration items in and out and sending affected stakeholders e-mail messages automatically are good ways to deal with configuration auditing and reporting for WebApps. True or false?

Back 20

True

Front 21

SCI standards take a formal view and do not address guidelines for applying change management in agile environments. True or false?

Back 21

False

Front 22

The cleanroom strategy is based on the ________ software process model
a. evolutionary
b. incremental
c. revolutionary
d. spiral

Back 22

b. incremental

Front 23

Which of the following tasks is not part of software configuration management?
a. change control
b. reporting
c. statistical quality control
d. version control

Back 23

c. statistical quality control

Front 24

This box specification describes the architectural design for some system component
a. black box
b. clear box
c. state box
d. white box

Back 24

c. state box

Front 25

The value in terms of the time or cost to recreate a lost system asset
a. threat
b. controls
c. asset
d. exposure

Back 25

d. exposure

Front 26

The cleanroom strategy relies on
a. exhaustive testing
b. extensive unit testing of all modules
c. tests that exercise the software as it is really used
d. white box testing strategies

Back 26

c. tests that exercise the software as it is really used

Front 27

Use of formal program correctness proofs as part of the cleanroom process eliminates the need do any testing for software defects. True or false?

Back 27

False

Front 28

In cleanroom software engineering a “box” encapsulates some system aspect at a particular level of detail. True or false?

Back 28

True

Front 29

This box specification describes an abstraction, stimuli, and response
a. black box
b. clear box
c. state box
d. white box

Back 29

a. black box

Front 30

This box specification is closely aligned with procedural design and structured programming
a. black box
b. clear box
c. state box
d. white box

Back 30

b. clear box

Front 31

By using only structured constructs as you create a procedural design, you make the work of proving design correctness much easier. True or false?

Back 31

True

Front 32

Which of the following is not an advantage of using rigorous correctness verification of each refinement of the clear box design
a. improves performance of code
b. produces better code than unit testing
c. reduces verification effort
d. results in near zero defect levels

Back 32

a. improves performance of code

Front 33

System resources that have value to its stakeholders
a. assets
b. reliability
c. security
d. mechanisms

Back 33

a. assets

Front 34

Statistical use testing relies on probability distributions based on
a. mixture of control structures used in the program
b. order in which the module execute
c. the way software will actually be used
d. user interface design standards

Back 34

c. the way software will actually be used

Front 35

Certification of an increment is complete once it has passed the formal verification process. True or false?

Back 35

False

Front 36

Which of the following model is part of the cleanroom certification process?
a. component model
b. sampling model
c. both a and b
d. none of the above

Back 36

c. both a and b

Front 37

A data invariant is a set of conditions that are true during the execution of any function. True or false?

Back 37

False

Front 38

In some formal languages, stored data that the system accesses and alters is called a(n)
a. attribute
b. data structure
c. state
d. variant

Back 38

c. state

Front 39

In formal methods work, an action that reads or writes data to a state is called a(n)
a. actor
b. event
c. invariant
d. operation

Back 39

d. operation

Front 40

What defines the circumstances in which a particular operation is valid?
a. data invariant
b. precondition
c. postcondition
c. state

Back 40

b. precondition

Front 41

A common notational convention in many formal methods is to write the variable with a prime in the postcondition for an operator. True or false?

Back 41

True

Front 42

Which of these are components of a formal specification language?
a. semantics that define the objects used
b. describe system set of relations defining the object rules
c. syntax that defines the notation
d. all of the above

Back 42

d. all of the above

Front 43

OCL makes use of several specialized mathematical characters. True or false?

Back 43

False

Front 44

Using formal methods eliminates the need to write natural language commentary in the specification document. True or false?

Back 44

False

Front 45

Created to avoid the attacks and to mitigate their damage
a. threat
b. controls
c. asset
d. exposure

Back 45

b. controls

Front 46

Brings additional confidentiality and trust issues to security because it blurs the line between “trusted inside” and “untrusted outside”
a. Social media
b. Cloud computing
c. Mobile applications
d. Internet of things

Back 46

b. Cloud computing

Front 47

Security metrics should focus on system dependability, trustworthiness and survivability. True or false?

Back 47

True

Front 48

Which of the following are not among the steps in security risk analysis
a. Identify assets
b. Create architectural overview
c. Rate threats
d. None of the above

Back 48

d. None of the above

Front 49

Threat analysis is the process of determining the conditions or threats that may damage system resources or make then inaccessible to unauthorized access. True or false?

Back 49

True

Front 50

Security engineering is a prerequisite to system integrity, availability, reliability, and safety. True or false?

Back 50

True