QUIZ 1 In Iterative development approach, which phase takes the least cost? [A]Iterative development [B]System estin!

"[#]Speci$ication [%]%esi!n &hat are !eneric so$tware process models? '#hoose one( [A]&ater$all, Iterative development, A!ile development [B]&ater$all, #omponent)*ased so$tware en!ineerin!, A!ile development [#]&ater$all, Iterative development, +,treme pro!rammin! development "[%]&ater$all, Iterative development, #omponent)*ased so$tware en!ineerin! &hat is a so$tware process model? [A]A simpli$ied representation in a water$all [B]A simpli$ied representation in a cycle o$ a so$tware process [#]A simpli$ied representation in a step *y step o$ a so$tware process "[%]A simpli$ied representation o$ a so$tware process, presented $rom a speci$ic perspective he c-rrent trends s-!!est that the economies o$ A.. developed and developin! nations are dependent on so$tware [A]/alse "[B] r-e In &ater$all approach, which phase takes the most cost? "[A]Inte!ration and testin! [B]%esi!n [#]Speci$ication [%]%evelopment &hat is a so$tware process? [A]A set o$ cycles whose !oal is the development or evol-tion o$ so$tware [B]A set o$ steps whose !oal is the development or evol-tion o$ so$tware [#]A set o$ models whose !oal is the development or evol-tion o$ so$tware "[%]A set o$ activities whose !oal is the development or evol-tion o$ so$tware he distri*-tion o$ the costs o$ so$tware en!ineerin! 01 depends on the process model that is -sed [A] r-e "[B]/alse In &ater$all approach, which phase takes the least cost? [A]%evelopment [B]Inte!ration and testin!

[#]%esi!n "[%]Speci$ication &hat are essential attri*-tes o$ !ood so$tware? [A]2aintaina*ility3 Undependa*ility3 +$$iciency3 Usa*ility "[B]2aintaina*ility3 %ependa*ility3 +$$iciency3 Accepta*ility [#]2aintaina*ility3 +$$iciency3 Usa*ility3 4ood look and $eel In #omponent)*ased so$tware en!ineerin! approach, which phase takes the least cost? "[A]Speci$ication [B]%esi!n [#]%evelopment [%]Inte!ration and testin! &hat are the key challen!es $acin! so$tware en!ineerin! in the 51st cent-ry? '#hoose one( [A] he hetero!eneity challen!e, the tr-st challen!e, the li$e time challen!e "[B] he hetero!eneity challen!e, the delivery challen!e, the tr-st challen!e [#] he delivery challen!e, the tr-st challen!e, the li$e time challen!e [%] he hetero!eneity challen!e, the delivery challen!e, the li$e time challen!e )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) ) QUIZ 5 &hich is the correct se6-ence o$ the $ollowin! activities in the process o$ System evol-tion? '1( Assess e,istin! systems '5( %e$ine system re6-irements '7( 2odi$y systems '8( 9ropose system chan!es [A]5:;1:;7:;8 "[B]5:;1:;8:;7 [#]5:;7:;1:;8 [%]5:;7:;8:;1 &hat is the main di$$erence *etween the Spiral model and other so$tware processes models? "[A] he e,plicit reco!nition o$ risk in the Spiral model [B] he !oal o$ 1*<ective settin! phase [#] he !oal o$ %evelopment and validation phase [%] he !oal o$ 9lannin! phase &hat is the o-tp-ts o$ =e6-irements elicitation and analysis? '#hoose one( "[A]System models [B]User and system re6-irements doc-ment

[#]=e6-irements doc-ment &hat is the correct se6-ence o$ the $ollowin! iterations in the =U9'=ational Uni$ied 9rocess( model? '1( +la*oration '5( Inception '7( ransition '8( #onstr-ction "[A]5 :; 1 :; 8 :; 7 [B]1 :; 5 :; 8 :; 7 [#]5 :; 8 :; 7 :; 1 [%]8 :; 7 :; 1 :; 5 &hat is the o-tp-t o$ /easi*ility st-dy phase in the re6-irements en!ineerin! process? [A]User re6-irement doc-ment "[B]=eport that recommends whether or not to contin-e development pro<ect [#]Stakeholders list [%]9ro<ect plan In contrast, the =U9 '=ational Uni$ied 9rocess( is normally descri*ed $rom which types o$ perspectives? "[A]%ynamic perspective, Static perspective, 9ractice perspective [B]%ynamic perspective, Static perspective, %eployment perspective [#]%ynamic perspective, Static perspective, Behavior perspective [%]%ynamic perspective, Static perspective, Iterative perspective &hat is the main di$$erence *etween the =U9 '=ational Uni$ied 9rocess( and other so$tware processes models? [A] he !oal o$ Inception phase "[B]9hase are more closely related to *-siness rather than technical concerns [#] he constr-ction phase is essentially concerned with system desi!n, pro!rammin! and testin! [%]System desi!n with re)-se &hich is the correct se6-ence o$ the $ollowin! activities in the &ater$all model? '1( System and so$tware desi!n '5( =e6-irement de$inition '7( Inte!ration and system testin! '8( Implementation and -nit testin! '>( 1peration and maintenance [A]1:;8:;7:;5:;> [B]1:;5:;7:;8:;> "[#]5:;1:;8:;7:;> [%]5:;7:;8:;1:;>

&hich is the correct se6-ence o$ the $ollowin! activities in the #omponent)*ased so$tware en!ineerin!? '1( #omponent analysis '5( System desi!n with re-se '7( =e6-irements modi$ication '8( %evelopment and inte!ration "[A]1:;7:;5:;8 [B]1:;7:;8:;5 [#]1:;5:;8:;7 [%]1:;5:;7:;8 he &ater$all approach is the B+S approach to development so$tware when [A]Addin! some new $eat-res to a system [B]Un)sta*le re6-irement systems [#] he so$tware system is small, -nclear re6-irements "[%] he so$tware system is lar!e and that is need developed at several sites hree cate!ories o$ risks are "[A]9ro<ect risks, technical risks, *-siness risks [B]B-siness risks, personnel risks, *-d!et risks [#]9lannin! risks, technical risks, personnel risks [%]2ana!ement risks, technical risks, desi!n risks )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) QUIZ 7 &hy many so$tware pro<ects are ?one)o$$? pro<ects? [A]Beca-se the re6-irements o$ so$tware pro<ects sho-ld doc-ment in m-lti lan!-a!es "[B]Beca-se the re6-irements o$ so$tware pro<ects are not the same [#]Beca-se the re6-irements o$ so$tware pro<ects are the same [%]Beca-se the re6-irements o$ so$tware pro<ects are always comple, &hat is the B+S way to do work *reakdown str-ct-re? "[A]Sets o-t the *reakdown o$ the pro<ect into activities and identi$ies the milestones and delivera*les associated with each activity [B]Sets o-t the *reakdown o$ the pro<ect into smaller activities [#]Sets o-t the *reakdown o$ the pro<ect into smaller tasks [%]Sets o-t the *reakdown o$ the pro<ect into smaller $-nctional &hat are milestones in pro<ect plannin!? [A]2ilestones are the end)point o$ a pro<ect phase [B]2ilestones are pro<ect res-lts delivered to c-stomers "[#]2ilestones are the end)point o$ a process activity &hat is the critical path? [A] he critical path is the shortest path in the activity network

"[B] he critical path is the se6-ence o$ dependent activities that de$ines the time re6-ired to complete the pro<ect [#] he critical path is the path in the activity network Select the B+S statement a*o-t critical path [A]9ro<ect mana!er do not need to know critical path [B]9ro<ect mana!er do not need allocate e,perienced people to do the tasks on the critical path, any slippa!e in the completion in any critical activity not ca-ses pro<ect delay "[#]9ro<ect mana!er sho-ld allocate e,perienced people to do the tasks on the critical path &hat is the o-tp-t o$ the $irst milestone in so$tware re6-irement en!ineerin! process? "[A]/easi*ility st-dy report doc-ment [B]=e6-irements doc-ment [#]=e6-irements analysis doc-ment [%]=e6-irements elicitation doc-ment &hich is the B+S principle o$ pro<ect sched-lin!? [A]All tasks are or!ani@ed conc-rrently [B]2a,imi@e task dependencies to avoid delays ca-sed *y one task waitin! $or another to complete [#]All tasks are or!ani@ed se6-ence "[%]2inimi@e task dependencies to avoid delays ca-sed *y one task waitin! $or another to complete he pro<ect sched-le shows [A] he reso-rces availa*le to the pro<ect, the work *reakdown and a sched-le $or carryin! o-t the workA "[B] he dependencies *etween activities, the estimated time re6-ired to reach each milestone and the allocation o$ people to activities &hat are delivera*les? '#hoose one( [A]%elivera*les are the o-tp-t o$ pro<ect desi!n "[B]%elivera*les are pro<ect res-lts delivered to c-stomers [#]%elivera*les are the o-tp-t o$ pro<ect plannin! [%]%elivera*les are the o-tp-t o$ pro<ect implementation &hich is the principle o$ prototype model? "[A]A prototype is to *-ild 6-ickly demonstrate to the c-stomer what the prod-ct look likeA 1nly minimal $-nctionality o$ the act-al prod-ct is provided d-rin! prototypin! phaseA [B]A prototype is to *-ild 6-ickly so$tware to the c-stomerA Almost $-nctionality o$ the prod-ct are completed and system tested [#]A prototype is to *-ild 6-ickly so$tware to the c-stomerA All $-nctionality o$ the prod-ct are completed and system tested

[%]A prototype is to *-ild 6-ickly so$tware to the c-stomerA 1nly some $-nctional o$ the prod-ct are completed and system tested )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) QUIZ 8 &hat are non B $-nctional re6-irements? "[A]#onstraints on the services or $-nctions o$$ered *y the system s-ch as timin! constraints, constraints on the development process, standards, etc [B]=e6-irements that come $rom the application domain o$ the system and that re$lect characteristics and constraints o$ that domain [#]Statements o$ services the system sho-ld provide how the system sho-ld react to partic-lar inp-ts and how the system sho-ld *ehave in partic-lar sit-ationsA &hat are !ood attri*-tes o$ re6-irements? '#hoose one( [A] esta*le, complete, clear, inconsistent, -nam*i!-o-s [B] esta*le, complete, clear, consistent, am*i!-o-s [#] esta*le, incomplete, clear, consistent, -nam*i!-o-s "[%] esta*le, complete, clear, consistent, -nam*i!-o-s &hat are domain re6-irements? [A]#onstraints on the services or $-nctions o$$ered *y the system s-ch as timin! constraints, constraints on the development process, standards, etc [B]Statements o$ services the system sho-ld provide how the system sho-ld react to partic-lar inp-ts and how the system sho-ld *ehave in partic-lar sit-ationsA "[#]=e6-irements that come $rom the application domain o$ the system and that re$lect characteristics and constraints o$ that domain &hat are system re6-irements? "[A]A str-ct-red doc-ment settin! o-t detailed descriptions o$ the systems $-nctions, services and operational constraints [B]#onstraints on the services or $-nctions o$$ered *y the system s-ch as timin! constraints, constraints on the development process, standards, etc [#]Statements in nat-ral lan!-a!e pl-s dia!rams o$ the services the system provides and its operational constraints &hich are types o$ non)$-nctional re6-irement? '#hoose one( "[A]9rod-ct re6-irements3 1r!ani@ational re6-irements3 +,ternal re6-irements [B]1r!ani@ational re6-irements3 +,ternal re6-irements3 0on)/-nctional =e6-irements [#]1r!ani@ational re6-irements3 +,ternal re6-irements3 System =e6-irements [%]User re6-irements3 1r!ani@ational re6-irements3 +,ternal re6-irements &hat is the B+S way to write re6-irement doc-ment? [A]Sho-ld incl-de C1& the system will *e implemented in a speci$ication o$ the system re6-irements

[B]Sho-ld 01 incl-de a de$inition o$ -ser re6-irements in a speci$ication o$ the system re6-irements [#]=e6-irement doc-ment sho-ld set o$ &CA the system sho-ld do and C1& it sho-ld do "[%]Sho-ld incl-de *oth a de$inition o$ -ser re6-irements and a speci$ication o$ the system re6-irements &hat are $-nctional re6-irements? [A]#onstraints on the services or $-nctions o$$ered *y the system s-ch as timin! constraints, constraints on the development process, standards, etc [B]=e6-irements that come $rom the application domain o$ the system and that re$lect characteristics o$ that domain "[#]Statements o$ services the system sho-ld provide how the system sho-ld react to partic-lar inp-ts and how the system sho-ld *ehave in partic-lar sit-ationsA &hat are -ser re6-irements? "[A]Statements in nat-ral lan!-a!e pl-s dia!rams o$ the services the system provides and its operational constraints [B]#onstraints on the services or $-nctions o$$ered *y the system s-ch as timin! constraints, constraints on the development process, standards, etc [#]A str-ct-red doc-ment settin! o-t detailed descriptions o$ the systems $-nctions, services and operational constraints &hich o$ the $ollowin! re6-irement statements *elon!s to domain re6-irements? [A]St-dents can reserve a li*rary item online "[B] here shall *e a standard -ser inter$ace to all data*ase that shall *e *ase on the Z7DA>E standard [#] he sta$$ mem*er sho-ld *e a*le to iss-e a li*rary item *y scannin! the *ar codes o$ the li*rary item and the st-dent card [%] he -ser sho-ld *e a*le to search $or a li*rary item *y speci$yin! a key word In reality, the distinction *etween di$$erent types o$ re6-irements is not clear)c-t "[A] r-e [B]/alse &hich o$ the $ollowin! re6-irement statements *elon!s to non)$-nctional re6-irements? [A]An article in$ormation shall incl-de A-thor, itle, %escription and other related in$ormation "[B] he -ser inter$ace shall *e implemented as simple C 2. witho-t $rames [#] he system shall *e a*le to search either all o$ the initial set o$ data*ases or select a s-* set $rom it, [%] he system shall provide appropriate viewers $or the -ser to read doc-ments in the doc-ment store )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

Q-i@ > &hats the B+S way to start creatin! a data)$low dia!ram? [A]In the class dia!ram, yo- list all the classes and then wrestle with the interclass associations, attri*-tions, operations "[B]In the data)$low dia!ram, yo- sho-ld start *y analy@in! the overall proc-rement process and then move on to the analysis o$ s-*)processes &hen sho-ld yo- -se state machine model? '#hoose one( [A]State machine -sed to de$ine the *o-ndaries o$ the system, validate system re6-irement "[B]%escri*e how a system responses to e,ternal and internal events3 It shows system states and events that ca-se transition $rom one state to another [#]State machine -sed to help the analyst to -nderstand the $-nctionality o$ the system, comm-nicatin! with c-stomer [%]State machine -sed in showin! the data e,chan!e *etween a system and other systems in its environment &hen sho-ld yo- -se data $low dia!rams '%/%(? '#hoose one( [A]%/% is -sed to descri*in! all o$ the thin!s that can *e done with a data*ase system [B]%/% is -sed to ill-strate the se6-ence o$ steps that m-st *e per$ormed in order to complete a task [#]%/% is -sed to showin! all o$ systems $-nctionalities availa*le "[%]%/% is -sed to showin! the data e,chan!e *etween a system and other systems in its environment #an two o*<ects associate with one another in more than one way? [A]0o "[B]Fes &hats the B+S way to start creatin! a state dia!ram? "[A]In the state dia!ram, yo- $irst list the states o$ the o*<ect and then $oc-s on the transition [B]In the state dia!ram, yo- list all the classes and then wrestle with the interclass associations &hats the B+S way to start creatin! a class dia!ram? [A]In the class dia!ram, yo- list all the classes and then wrestle with the interclass associations, attri*-tions, operations "[B]In the class dia!ram, yo- $irst list the states o$ the o*<ect and then $oc-s on the attri*-tions, operations Another name $or inheritance is [A]Association "[B]4enerali@ation [#]A!!re!ation

[%]#omposition &hen sho-ld yo- -se se6-ence dia!ram? '#hoose one( [A]Sho-ld -se se6-ence dia!ram to represent e,ception *ehavior 'when errors happen( [B]Sho-ld -se se6-ence dia!ram to descri*in! *ranchin! *ehaviors o$ the #9GI9 network protocol [#]Sho-ld -se se6-ence dia!ram to represent all o$ the people who mi!ht -se the $-nctionalities o$ the system "[%]Sho-ld -se se6-ence dia!ram to ill-strate the se6-ence o$ steps that m-st *e per$ormed in order to complete a task &hich models !ive a static view o$ a system? [A]1*<ect model3 %ata)$low model3 #onte,t model3 Architect-ral model3 "[B]1*<ect model3 %ata model3 Architect-ral model3 [#]1*<ect model3 %ata model3 #onte,t model3 State machine model3 &hen sho-ld yo- -se -se)case dia!ram? '#hoose one( [A]Sho-ld -se -se)case dia!ram to represent e,ception *ehavior 'when errors happen( [B]Sho-ld -se -se)case dia!ram to ill-strate the se6-ence o$ steps that m-st *e per$ormed in order to complete a task [#]Sho-ld -se -se)case dia!ram to descri*in! *ranchin! *ehaviors o$ the #9GI9 network protocol "[%]Sho-ld -se -se)case dia!ram to represent all o$ the people who mi!ht -se the $-nctionalities o$ the system &hat are types o$ *ehavioral models? '#hoose one( [A]%ata)/low, Str-ct-re model [B]%ata)/low, Static model "[#]%ata)/low, State machine [%]%ata)/low, %ata Str-ct-re model QUIZ H &hich non)$-nctional system re6-irements that the so$tware system architect-re may depend on? '#hoose one( [A]9er$ormance, Sec-rity, Sa$ety, Availa*ility, +asy deploy [B]9er$ormance, +$$iciency, Sa$ety, Availa*ility, 2aintaina*ility [#]9er$ormance, Sec-rity, Sa$ety, Availa*ility, +asy implement "[%]9er$ormance, Sec-rity, Sa$ety, Availa*ility, 2aintaina*ility Select the B+S sol-tion $or architect-ral desi!n o$ a so$tware system that per$ormance is a critical re6-irement [A] he architect-ral sho-ld *e desi!ned to localise critical operations and minimise comm-nications, -se $ine)!rain rather than lar!e)!rain components [B] he architect-ral sho-ld *e desi!ned to localise critical operations and ma,imise comm-nications, -se lar!e)!rain rather than $ine)!rain components

"[#] he architect-ral sho-ld *e desi!ned to localise critical operations and minimise comm-nications, -se lar!e)!rain rather than $ine)!rain components &hich o$ the $ollowin! models *elon! to +vent)driven systems? '#hoose one( [A]#all)ret-rn model, 2ana!er model "[B]Broadcast models, Interr-pt)driven models [#]1*<ect B oriented control model, /-nction B 1riented control model &hat is the correct statement a*o-t so$tware architect-ral desi!n decisions? "[A]Architect-ral desi!n is a creative process, the activities in the process di$$ers dependin! on the type o$ system *ein! developed [B]Architect-ral desi!n only $oc-s on non)$-nctional re6-irements and choose architect-ral style or styles are appropriate $or the system [#]Architect-ral desi!n only $oc-s on $-nctional re6-irements and choose architect-ral style or styles are appropriate $or the system &hich o$ the $ollowin! styles *elon! to #ontrol styles? '#hoose one( "[A]#entralised control, +vent)*ased control [B]1*<ect B oriented control, /-nction B 1riented control [#]Shared data control, Shared services control &hich o$ the $ollowin! styles *elon! to System or!ani@ation? '#hoose one( [A]#entralised control, +vent)*ased control [B]1*<ect B oriented control, /-nction B 1riented control "[#] he repository model3 he #lient)server model3 he A*stract machine 'layered( model &hat is the correct statement a*o-t so$tware architect-ral styles? [A]2ost lar!e systems $ollow two architect-ral styles "[B]2ost lar!e systems are hetero!eneo-s architect-ral styles [#]2ost lar!e systems $ollow one architect-ral style &hat is the correct statement a*o-t so$tware architect-ral desi!n? [A] he architect-ral desi!n is normally e,pressed as a se6-ence dia!ram presentin! an overview o$ the system str-ct-re [B] he architect-ral desi!n is normally e,pressed as a -se case dia!ram presentin! an overview o$ the system str-ct-re [#] he architect-ral desi!n is normally e,pressed as a state dia!ram presentin! an overview o$ the system str-ct-re "[%] he architect-ral desi!n is normally e,pressed as a *lock dia!ram presentin! an overview o$ the system str-ct-re &hich o$ the $ollowin! models *elon! to #entralised control? '#hoose one( "[A]#all)ret-rn model, 2ana!er model [B]Shared data control model, Shared services control model [#]1*<ect B oriented control model, /-nction B 1riented control model

&hat are advanta!es o$ e,plicitly desi!nin! and doc-mentin! so$tware architect-re? [A]Stakeholder comm-nication3 System analysis3 %etail eno-!h $or pro!rammers to codin! [B]Stakeholder comm-nication3 .ar!e)scale re-se3 0ot a*stract, stakeholders can -nderstand and disc-ssion with the development team, detail eno-!h $or developers to codin! "[#]Stakeholder comm-nication3 System analysis3 .ar!e)scale re-se &hat are the models in architect-re desi!n? '#hoose one( [A]Static, %ynamic, Ialidation, =elationship, %istri*-tion [B]Static, %ynamic, Inter$ace, =elationship, +vol-tion "[#]Static, %ynamic, Inter$ace, =elationship, %istri*-tion &hat are three !eneral architect-ral styles? '#hoose one( [A]System or!anisation3 decomposition styles3 9roced-re styles "[B]System or!anisation3 decomposition styles3 #ontrol styles [#]System or!anisation3 decomposition styles3 1*<ect oriented pro!ram [%]System or!anisation3 decomposition styles3 .o!ical styles Another name $or [J is aJ] relationship is "[A]4enerali@ation [B]A!!re!ation [#]Association [%]#omposition QUIZK &hich is the correct statement a*o-t co-plin!? [A]#o-plin! deals with the interactions within a sin!le o*<ect or so$tware component "[B]#o-plin! deals with interactions *etween o*<ects or so$tware components [#]#o-plin! concerned with how classes are interrelated &hich is 01 a primary !oal in the desi!n o$ the U2.? "[A]Be dependent on partic-lar pro!rammin! lan!-a!e [B]S-pport hi!her)level development concepts [#]9rovide -sers a ready)to)-se, e,pressive vis-al modelin! lan!-a!e so they can develop and e,chan!e meanin!$-l models [%]Inte!rate *est practices and methodolo!ies &hat do yo- mean *y co-plin! in so$tware desi!n? [A]#o-plin! are two o*<ects or two so$tware components "[B]#o-plin! is a meas-re o$ the stren!th o$ association esta*lished *y a connection $rom one o*<ect or so$tware component to anotherA [#]#o-plin! are two so$tware components or two s-*)systems

&hich o$ the $ollowin! is 01 an approach that may *e -sed to identi$y o*<ect classes? [A]Identi$y tan!i*le thin!s in the application domain "[B]Use +vent)*ased analysis [#]4rammatical analysis identi$yin! no-ns and ver*s [%]Use scenario)*ased analysis [+]Use an approach *ased on the *ehavior o$ the systemA &hich are o*<ect)oriented strate!ies? '#hoose one( [A]1*<ect)oriented desi!n, 1*<ect)oriented pro!rammin!, 1*<ect)oriented doc-ment "[B]1*<ect)oriented analysis, 1*<ect)oriented desi!n, 1*<ect)oriented pro!rammin! [#]1*<ect)oriented desi!n, 1*<ect)oriented pro!rammin!, 1*<ect)oriented deployment [%]1*<ect)oriented analysis, 1*<ect)oriented desi!n, 1*<ect)oriented packa!e &hich is 01 the main activity in desi!n process? [A]%esi!nin! the -ser inter$ace [B]%esi!nin! the access layer "[#]%esi!nin! the test case [%]%esi!nin! classes 'their attri*-tes, methods, etcJA( [+]Iteratin! and re$inin! the desi!n &hat is the p-rpose o$ analysis? [A] he main o*<ective o$ the analysis is to capt-re a incomplete, -nam*i!-o-s, and inconsistent pict-re o$ re6-irements o$ the system and what the system m-st do to satis$y the -sers re6-irement and needs "[B] he main o*<ective o$ the analysis is to capt-re a complete, -nam*i!-o-s, and consistent pict-re o$ re6-irements o$ the system and what the system m-st do to satis$y the -sers re6-irement and needs [#] he main o*<ective o$ the analysis is to capt-re a complete, am*i!-o-s, and inconsistent pict-re o$ re6-irements o$ the system and what the system m-st do to satis$y the -sers re6-irement and needs Another name $or [Jhas aJ] relationship is "[A]#omposition [B]Association [#]=eali@ation [%]4enerali@ation &hich is 01 an advanta!e o$ inheritance? "[A] he inheritance !raphs o$ analysis, desi!n and implementation have di$$erent $-nctions and sho-ld *e separately maintainedA [B] he inheritance !raph is a so-rce o$ or!anisational knowled!e a*o-t domains and systemsA [#]It is a re-se mechanism at *oth the desi!n and the pro!rammin! levelA [%]It is an a*straction mechanism which may *e -sed to classi$y entitiesA &hich is the correct statement a*o-t o*<ect identi$ication?

[A]1*<ect identi$ication is a water$all process3 it does not relies on the skill, e,perience and domain knowled!e o$ system desi!ners [B]1*<ect identi$ication is a water$all process3 it relies on the skill, e,perience and domain knowled!e o$ system desi!ners "[#]1*<ect identi$ication is an iterative process3 it relies on the skill, e,perience and domain knowled!e o$ system desi!ners [%]Identi$yin! o*<ects 'or o*<ect classes( is the easiest part o$ o*<ect oriented desi!n &hich is the $irst sta!e in an o*<ect)oriented desi!n process? [A]%esi!n the system architect-re [B]Speci$y o*<ect inter$acesA "[#]%evelop an -nderstandin! o$ the relationships *etween the so$tware *ein! desi!ned and its e,ternal environment [%]Identi$y the principal system o*<ects3 &hich is the ri!ht se6-ence in the process o$ prototype development? '1( %e$ine prototype $-nctionality '5( +sta*lish prototype o*<ectives '7( +val-ate prototype '8( %evelop prototype [A]5 :; 8 :; 7 :; 1 [B]1 :; 5 :; 8 :; 7 [#]5 :; 1 :; 7 :; 8 "[%]5 :; 1 :; 8 :; 7 he practices small, $re6-ent releases o$ the system, the approach to re6-irements description *ase on c-stomer stories or scenarios in +,treme 9ro!rammin! $it into which principle o$ a!ile methods? [A]2aintain simplicity [B]9eople not process [#]+m*race chan!e [%]#-stomer involvement "[+]Incremental delivery &hat are common principles o$ a!ile methods? "[A]#-stomer involvement3 incremental delivery3 people not process3 em*race chan!e3 maintain simplicity [B]#-stomer involvement3 incremental delivery3 people not process3 em*race chan!e3 Increments are delivered to c-stomers every 5 weeks [#]#-stomer involvement3 incremental delivery3 people process3 em*race chan!e3 maintain simplicity &hich o$ the $ollowin! B+S descri*es the ma<or di$$ic-lties with incremental development? "[A]#ontract-al pro*lems, validation pro*lems, mana!ement pro*lems and maintenance pro*lems

[B]=e6-irement pro*lems, desi!n pro*lems, implementation pro*lems and validation pro*lems [#]#ontract-al pro*lems, re6-irement pro*lems, implementation pro*lems and mana!ement pro*lems [%]%esi!n pro*lems, mana!ement pro*lems, validation pro*lems and maintenance pro*lems &hich o$ the $ollowin! is 01 an advanta!e o$ -sin! incremental development and delivery? [A]2ore e,tensive testin! o$ critical c-stomer $-nctionality [B]+arly delivery o$ critical $-nctionality to c-stomer [#].ower risk o$ overall pro<ect $ail-re [%]+arly increments serve as prototypes to e,plore re6-irements "[+]Systems are o$ten have !ood str-ct-res he practices re!-lar system release, test)$irst development and contin-o-s inte!ration in +,treme 9ro!rammin! $it into which principle o$ a!ile methods? [A]2aintain simplicity "[B]+m*race chan!e [#]#-stomer involvement [%]9eople not process [+]Incremental delivery &hich is 01 an advanta!e o$ rapid so$tware development? [A] he end res-lt is the hi!h 6-ality so$tware in least possi*le time d-ration and satis$ied c-stomer [B]=apid so$tware development methodolo!y has an adaptive team which is a*le to respond to the chan!in! re6-irements "[#]1nly senior pro!rammer are capa*le o$ takin! the kind o$ decisions re6-ired d-rin! the development process [%]/ace to $ace comm-nication and contin-o-s inp-ts $rom c-stomer representative leave no space $or !-esswork [+] he doc-mentation is crisp and to the point to save time &hich is the evidence when said that Lpair pro!rammin! is as e$$icient as the same n-m*er o$ pro!rammers workin! individ-allyM? '#hoose one( [A]In pair pro!rammin!, all pro<ect team mem*ers have the same level "[B]2eas-rements s-!!est that development prod-ctivity with pair pro!rammin! is similar to that o$ two people workin! independently [#]In pair pro!rammin!, all pro<ect team mem*ers have the same skills [%]In pair pro!rammin!, pro<ect team mem*er does not need to st-dy re6-irement &hat is a -ser story in e,treme pro!rammin!? [A]It is a history o$ -ser "[B]It is a re6-irement e,pressed as scenario [#]It is a small card

[%]It is a small ta*le he practices pair pro!rammin!, collective ownership o$ the system code, and s-staina*le pace in +,treme 9ro!rammin! $it into which principle o$ a!ile methods? "[A]9eople not process [B]Incremental delivery [#]2aintain simplicity [%]#-stomer involvement [+]+m*race chan!e &ho chooses the stories $or incl-sion in the ne,t release *ased on their priorities and the sched-le estimates? "[A]#-stomer [B]%eveloper [#] ester [%]9ro<ect 2ana!er In the e,treme pro!rammin!, what is the role o$ c-stomer? [A] o help de$ine workin! process that wo-ld *e $ollowed *y the development team [B] o help de$ine the team mem*ers [#] o help code re$actorin! "[%] o help develop stories that de$ines the re6-irements &hich part o$ the system can *e re-se? '#hoose one( "[A]Application system, #omponent re-se, 1*<ect and $-nction [B]Application system, 1*<ect and $-nction, 9rod-ction environment [#]Application system, #omponent re-se, 9ro<ect team mem*er he trend o$ desi!n process in most so$tware en!ineerin! disciplines is *ase on [A]%esi!n system $rom the scratch [B]%esi!n system $rom ori!inal so$tware development "[#]=e-se o$ e,istin! system or component I$ the applications or components are developed in di$$erence pro!rammin! lan!-a!e $rom the pro!rammin! lan!-a!e yo- are -sin! then yo- can not re-se that [A] r-e "[B]/alse &hich is 01 the main *ene$it o$ so$tware re-se? [A]Increased dependa*ility "[B]#reatin! and maintainin! a component li*rary [#]=ed-ced process risk [%]Accelerated developmentA [+]+$$ective -se o$ specialists, standards compliance Fo- can not to com*ine m-ltiple patterns in the comple, so$tware system

"[A]/alse [B] r-e &hich is the correct statement a*o-t 9rod-ct line architect-res? "[A]Architect-res m-st *e str-ct-red in s-ch a way to separate di$$erent s-*)systems and to allow them to *e modi$ied [B]Architect-res m-st *e str-ct-red in s-ch a way to incl-de di$$erent s-*)systems and do not allow them to *e modi$ied All o$ the $ollowin! are the desi!n choices have to *e made when re-sin! #1 S prod-cts +N#+9 [A]&hich #1 S prod-cts o$$er the most appropriate $-nctionality "[B]Cow will data *e e,chan!ed *etween di$$erent mod-les [#]Cow will data *e e,chan!ed *etween di$$erent prod-cts [%]&hat $eat-res o$ a prod-ct will act-ally *e -sedA he trend o$ =e-se)*ased so$tware en!ineerin! is an approach to development that tries to [A]%esi!n system $rom the scratch "[B]2a,imi@e the re-se o$ e,istin! so$tware [#]2inimi@e the re-se o$ e,istin! so$tware [%]%esi!n system $rom ori!inal so$tware development &hat are the *ene$its o$ so$tware re)-sin!? [A] o have *etter so$tware in shorter d-ration, $ewer so$tware reso-rce involve in so$tware development, easy deployment "[B] o have $aster delivery o$ system, lower cost, increased so$tware 6-ality [#] o have *etter so$tware at lower cost, shorter d-ration, $ewer so$tware reso-rce involve in so$tware development [%] o have $ewer so$tware reso-rce involve in so$tware development, easy deployment &hich is 01 a key $actor that yo- sho-ld consider when plannin! re-se? [A] he criticality o$ the so$tware and its non)$-nctional re6-irements [B] he *ack!ro-nd, skill and e,perience o$ the development team "[#] he name o$ the application or component re-se [%] he development sched-le o$ the so$tware3 he application domain [+] he e,pected so$tware li$etime3 he plat$orm in which the system will r-n All o$ the $ollowin! are types o$ pro!ram !enerator +N#+9 "[A]#omponent !enerators [B]9arser and le,ical analyser !enerators [#]Application !enerators [%]#ode !enerators &hat is the normal order o$ activities in which so$tware testin! is or!ani@ed? [A]System test, inte!ration test, -nit test, validation test

[B]Unit test, inte!ration test, system test, validation test "[#]Unit test, inte!ration test, validation test, system test he main $oc-s o$ acceptance testin! isO [A]$indin! $a-lts in the system [B]ens-rin! that the system is accepta*le to all -sers [#]testin! the system with other systems "[%]testin! $rom a *-siness perspective Unit testin! is a "[A]&hite *o, testin! [B]Black *o, testin! [#]Stress testin! he e$$ort re6-ired $or locatin! and $i,in! an error in an operational pro!ram isO [A]Usa*ility [B] esta*ility [#]+$$eciency "[%]2aintaina*ility &ork*enches are also called [A]9hases [B]Steps [#] asks "[%]All o$ the other choices A pro!ram validates a n-meric $ield as $ollowsO val-es less than 1E are re<ected, val-es *etween 1E and 51 are accepted, val-es !reater than or e6-al to 55 are re<ected [A]1E,11,51 [B]7,5E,51 "[#]7,1E,55 [%]1E,51,55 A s-ccess$-l de$ect test is a test which ca-ses a pro!ram to *ehave in an normal way [A] r-e "[B]/alse &hich doc-ment identi$ies and descri*es the testin! that will *e implemented and e,ec-ted? [A] est report [B] est plan "[#] est case [%] est script &hat is the p-rpose o$ de$ect testin!?

[A] o veri$y that the so$tware meet its re6-irements [B] o test individ-al pro!ram components "[#] o discover $a-lts that make so$twares *ehavior incorrect [%] o ens-re a*o-t the per$ormance o$ the so$tware he testin! intended to show that previo-sly correct so$tware has not *een adversely a$$ected *y chan!es is callO "[A]=e!ression testin! [B]Black *o, testin! [#]&hite *o, testin! &e split testin! into distinct sta!es primarily *eca-seO "[A]+ach test sta!e has a di$$erent p-rposeA [B]It is easier to mana!e testin! in sta!esA [#]&e can r-n di$$erent tests in di$$erent environmentsA [%] he more sta!es we have, the *etter the testin!A &hich is the ri!ht se6-ence in the so$tware testin! process? '1( 9repare test data '5( #reate test case '7( 9er$orm test '8( #reate test report [A]5 :; 1 :; 8 :; 7 [B]5 :; 8 :; 7 :; 1 "[#]5 :; 1 :; 7 :; 8 [%]1 :; 5 :; 8 :; 7 &hich o$ the $ollowin! is 01 part o$ con$i!-ration mana!ement? [A]controlled li*rary access [B]stat-s acco-ntin! o$ con$i!-ration items "[#] he people in the pro<ect team [%]identi$ication o$ so$tware versions &hich is the chan!e mana!ement concerned with? [A]Peepin! track the chan!e [B]System re*-ildin!, releasin! [#]+ns-rin! that the chan!e is made "[%]All o$ the other choices So$tware systems are s-*<ect to contin-al chan!e re6-ests $rom [A]Users, 9ro<ect mana!ers, #hie$ +,ec-tive 1$$icer [B]%evelopers, 9ro<ect mana!ers, #hie$ +,ec-tive 1$$icer [#]9ro<ect mana!ers, 9ro<ect %irector, #hie$ +,ec-tive 1$$icer "[%]%evelopers, Users, 2arket $orces

he c-stomer wants to make a chan!e to the pro<ect scopeA he *est thin! $or the pro<ect team to eval-ate is theO [A]e$$ect o$ the chan!e on the pro<ect *aselines [B]e$$ect o$ the chan!e on scope plannin! [#]e$$ect o$ the chan!e on the pro<ect scope "[%]e$$ect o$ the chan!e on the pro<ect sched-le, cost, 6-ality, and risks &hich o$ the $ollowin! is the so-rce $or so$tware version -p? "[A]All o$ the other choices [B]/or di$$erent machinesG1SH [#]1$$erin! di$$erent $-nctionality [%] ailored $or partic-lar -ser re6-irements A con$i!-ration mana!ement system wo-ld 01 normally provideO [A]=estricted access to the so-rce code li*raryA [B] he precise di$$erences in versions o$ so$tware component so-rce codeA "[#]/acilities to compare test res-lts with e,pected res-ltsA [%].inka!e o$ c-stomer re6-irements to version n-m*ersA &hat is a release? [A]An instance o$ a system which is $-nctionally distinct in some way $rom other system instances "[B]An instance o$ a system which is distri*-ted to -sers o-tside o$ the development teamA [#]An instance o$ a system which is $-nctionally identical *-t non)$-nctionally distinct $rom other instances o$ a system &ho review and approves the chan!e re6-est? "[A]#han!e control *oard [B]9ro<ect mana!er [#]#hie$ e,ec-tive o$$icer [%]9ro<ect director &hich o$ the $ollowin! items wo-ld not come -nder #on$i!-ration 2ana!ement? [A]-ser re6-irement doc-ments [B]%esi!n doc-mentation [#]1peratin! systems "[%].ive data &hich is the ri!ht se6-ence o$ the chan!e mana!ement process? '1( Analy@e chan!e re6-est '5( =e6-est chan!e *y completin! a chan!e re6-est $orm '7( 2ake chan!es to so$tware '8( S-*mit re6-est to chan!e control *oard '>( #reate new system version "[A]5 :; 1 :; 8 :; 7:;>

[B]1 :; > :; 8 :; 7:;5 [#]5 :; 1 :; 7 :; 8:;> [%]5 :; 1 :; > :; 7:;8 &hich are levels o$ protection in application sec-rity en!ineerin!? '#hoose one( [A]Uni,)levelA Application)levelA %ata*ase)level "[B]9lat$orm)levelA Application)levelA =ecord)levelQ [#]&indows)levelA Application)levelA %ata*ase)level [%].in-,)levelA Application)levelA =ecord)level #onsider sec-rity desi!n $or -sername and password protection, what is the !ood desi!n? '#hoose one( [A]Username and 9assword cannot *e *lankA Username can *e any characters "[B]System -sers are a-thenticated -sin! a lo!in nameGpassword com*inationA =e6-ires -ser chan!e password a$ter 5 months [#]=e6-ires -ser chan!e password a$ter 5 monthsA Username can *e any characters [%]Username can *e any charactersA 9assword can *e *lank &hat is the $irst sta!e in s-rviva*ility analysis [A]Identity so$tspots and s-rviva*ility strate!iesA "[B]=eview system re6-irements and architect-reA [#]Identi$y attacks and compromisa*le componentsA [%]Identi$y critical services and componentsA 9assword sho-ld *e chan!ed [A]1n re!-lar *asis [B]&hen yo- s-spect that password is compromised [#]&hen yo- leave the place "[%]All o$ the other choices &hy do we need consider sec-rity $or pro<ect? '#hoose one( [A] o allow administrators mana!e -ser [B] o have !ood architect-re desi!n [#]Sec-rity is a part o$ So$tware process "[%] o protect the system a!ainst e,ternal attack &hich o$ the $ollowin! desi!n !-idelines $or sec-re systems en!ineerin! is 01 tr-e? [A]Ialidate all inp-ts [B]Use red-ndancy and diversity to red-ce riskA [#]Avoid a sin!le point o$ $ail-reA "[%]Avoid -sin! red-ndancy and diversity to red-ce risk [+]Base sec-rity decisions on an e,plicit sec-rity policyA &hat is the last sta!e in s-rviva*ility analysis [A]Identity attacks and compromisa*le componentsA [B]=eview system re6-irements and architect-reA

"[#]Identi$y so$tspots and s-rviva*ility strate!iesA [%]Identi$y critical services and componentsA All o$ the $ollowin! are the complementary strate!ies to achieve s-rviva*ility +N#+9 "[A]#onversion [B]=esistance [#]=eco!nition [%]=ecovery %e$ine the sec-rity terms ?attack? [A] he possi*le loss or harm that co-ld res-lt $rom a s-ccess$-l attackA his can *e loss or dama!e to data or can *e a loss o$ time and e$$ort i$ recovery is necessary a$ter a sec-rity *reachA "[B]An e,ploitation o$ a system?s v-lnera*ilityA 4enerally, this is $rom o-tside the system and is a deli*erate attempt to ca-se some dama!e [#]A weakness in a comp-ter *ased system that may *e e,ploited to ca-se loss or harm &hich is the correct statement a*o-t inte!rity? [A]+,tent to which a pro!ram satis$ies its speci$ications and $-l$ils the -ser?s mission and !oals [B]+$$ort re6-ired $or learnin!, operatin!, preparin! inp-t interpretin! o-tp-t o$ a pro!ram [#]+$$ort re6-ired to co-ple one system with another "[%]+,tent to which access to so$tware or data *y an -na-thori@ed persons can *e controlled 9ro*a*ility o$ a so$tware $ail-re is the "[A]=elia*ility [B]%e$ect rate [#]#orrectness [%] esta*ility 9assword sho-ld *e chan!ed "[A]1n re!-lar *asis [B]&hen yo- $or!et the password [#]&hen yo- leave the workplace [%]All o$ the other choices 1A&hat was the so$tware crisis? As more power$-l hardware was introd-ced in the 1DHEs, lar!er so$tware systems were developedA hese were -s-ally late, -nrelia*le, did not meet -ser needs and cost more than e,pectedA he pro*lems o$ prod-cin! so$tware was the so$tware crisisA 5A&hat are the two $-ndamental types o$ so$tware prod-ct? 4eneric prod-cts that are desi!ned to meet the needs o$ many di$$erent c-stomersA #-stomised prod-cts desi!ned to meet the speci$ic needs o$ a sin!le c-stomerA

7A&hat is so$tware en!ineerin!? An en!ineerin! discipline concerned with all aspects o$ so$tware prod-ction $rom speci$ication to system maintenanceA 8A&hat are the $-ndamental activities in so$tware processes? So$tware speci$iation, so$tware development, so$tware validation and so$tware evol-tionA >A&hat are the three !eneral paradi!ms o$ so$tware development? he water$all approach, iterative development, component)*ased so$tware en!ineerin!A HA&hat are the principal components o$ a so$tware en!ineerin! method? System model descriptions, r-les, recommendations, process !-idanceA KA&hat does the acronym #AS+ stand $or? #omp-ter Aided So$tware +n!ineerin!A RA&hy is maintaina*ility an important attri*-te o$ so$tware? Beca-se all so$tware is s-*<ect to chan!e a$ter it !oes into -se and the costs o$ so$tware maintenance o$ten e,ceeds the development costs o$ the so$twareA DA&hat are three key challen!es $acin! so$tware en!ineerin!? he hetero!eneity challen!e, the delivery challen!e, the tr-st challen!eA 1EA&hat is a so$tware en!ineerin! code o$ ethics? A set o$ principles that set o-t, in a !eneral way, standards o$ e,pected *ehavio-r $or pro$essional so$tware en!ineersA 1A&hat are the $-ndamental activities that are common to all so$tware processes? So$tware speci$ication, so$tware desi!n and implementation, so$tware validation, so$tware evol-tionA 5A.ist the three $-ndamental so$tware process $rameworks that are -sed to create speci$ic so$tware processesA he water$all model +vol-tionary development #omponent)*ased so$tware en!ineerin! 7A&hy are iterations -s-ally limited when the water$all model is -sed? he water$all model is a doc-ment)driven model with doc-ments prod-ced at the end o$ each phaseA Beca-se o$ the cost o$ prod-cin! and approvin! doc-ments, iterations and costly and involve si!ni$icant reworkA Cence they are limitedA 8ABrie$ly descri*e two types o$ evol-tionary developmentA +,ploratory development where the o*<ective o$ the process is to work with c-stomers to e,plore their re6-irements and deliver a $inal)systemA hrow)away prototypin! where the

o*<ective is to develop a *etter -nderstandin! o$ the c-stomers re6-irements and deliver a *etter re6-irements speci$icationA >A&hat are the development sta!es in #BS+? #omponent analysisA =e6-irements modi$icationA System desi!n with re-seA %evelopment and inte!rationA HA&hat are the advanta!es o$ -sin! incremental development and delivery? +arly delivery o$ critical $-nctionality to the c-stomerA +arly increments serve as prototypes to e,plore re6-irementsA .ower risk o$ overall pro<ect $ail-reA 2ore e,tensive testin! o$ critical c-stomer $-nctionalityA KA&hat are the $o-r sectors in each loop in Boehm?s spiral model? 1*<ective settin!A =isk assessment and red-ctionA %evelopment and validationA 9lannin!A RA&hat are the principal re6-irements en!ineerin! activities? /easi*ility st-dyA =e6-irements elicitation and analysisA =e6-irements speci$icationA =e6-irements validationA DA&hat models mi!ht *e developed when applyin! a str-ct-red method? An o*<ect modelA A se6-ence modelA A state transition modelA A str-ct-ral modelA A data)$low modelA 1EA&hat are the three important sta!es in the testin! process? #omponent 'or -nit( testin!A System or inte!ration testin!A Acceptance testin!A 11A&hy is it increasin!ly irrelevant to distin!-ish *etween so$tware development and evol-tion? /ew so$tware systems are now completely new and a more realistic model o$ so$tware development is o$ an iterative process that lasts $or the li$etime o$ the so$twareA 15A&hat are the $o-r phases o$ the =ational Uni$ied 9rocess? Inception, ela*oration, constr-ction, transitionA

17A&hat are the si, $-ndamental *est practices in the =U9? %evelop so$tware iterativelyA 2ana!e re6-irementsA Use component)*ased architect-resA Iis-ally model so$twareA Ieri$y so$tware 6-alityA #ontrol chan!es to so$twareA 18A4ive $ive e,amples o$ activities that can *e a-tomated -sin! #AS+A 4raphical system modellin!A 2aintainin! a data dictionaryA 4eneratin! -ser inter$acesA 9ro!ram de*-!!in!A ranslatin! pro!rams $rom one lan!-a!e to anotherA 1>A&hat is the distinction *etween a #AS+ tool and a #AS+ work*ench? A #AS+ tool s-pports an individ-al process task s-ch as checkin! the consistency o$ a desi!nA A #AS+ work*ench s-pports sets o$ related activities s-ch as speci$ication or desi!nA 1A&hat are important di$$erences *etween so$tware pro<ect mana!ement and other types o$ pro<ect mana!ement? he prod-ct 'so$tware( is intan!i*leA here are no standard so$tware processesA .ar!e so$tware pro<ects are o$ten one)o$$ pro<ectsA 5A.ist $ive common pro<ect mana!ement activitiesA Any $ive $rom the $ollowin!O proposal writin!, pro<ect plannin! and sched-lin!, pro<ect costin!, pro<ect monitorin! and reviewin!, personnel selection and eval-ation, report writin! and presentationsA 7A&hat is incl-ded in a 6-ality plan and a validation plan? Q-ality planO he 6-ality proced-res and standards that sho-ld *e -sed in a pro<ectA Ialidation planO he approach, reso-rces and sched-le -sed $or system validationA 8A&hat is the di$$erence *etween a milestone and a delivera*le? A milestone is a reco!nised endpoint o$ some activity that represents a decision point $or a pro<ectA A delivera*le is a pro<ect o-tp-t that is delivered to the c-stomerA >A&hat is involved in pro<ect sched-lin!? Separatin! the total planned work in the pro<ect into separate activities and <-d!in! the time re6-ired to complete these activitiesA HA+,plain how *ar charts and activity networks !ive di$$erent views o$ a pro<ect sched-leA

Activity networks show the time re6-ired to complete an activity and the dependence on activitiesA Bar charts show the activity timeline ill-stratin! the relative len!th o$ activities and the dates when they take placeA KA&hat are three related cate!ories o$ risk? 9ro<ect risksA 9rod-ct risksA B-siness risksA RAS-!!est $o-r risks that may threaten the s-ccess o$ a so$tware pro<ectA Sta$$ t-rnover, mana!ement chan!e, hardware -navaila*ility, re6-irements chan!e, speci$ication delays, si@e -nderestimate, #AS+ tool -nderper$ormance, technolo!y chan!e, prod-ct competitionA DA4ive two e,amples o$ technolo!y risks that may arise in a so$tware pro<ectA he system data*ase cannot process as many transactions as e,pectedA =e-sed so$tware components are de$ectiveA 1EA&hat is involved in risk monitorin!? =e!-larly assessin! the pro<ect risks to decide whether or not that the risk is *ecomin! more or less pro*a*le and whether the e$$ects o$ the risk have chan!edA 1A&hat are system re6-irements? %escriptions o$ the services to *e provided *y a system and the systems operational constraintsA 5A&hat are -ser re6-irements and system re6-irements? User re6-irements are statements in a lan!-a!e that is -nderstanda*le to a -ser o$ what services the system sho-ld provide and the constraints -nder which it operatesA System re6-irements are more detailed descriptions o$ the system services and constraint, written $or developers o$ the systemA 7A&hat is the distinction *etween $-nctional and non)$-nctional re6-irements? /-nctional re6-irements de$ine what the system sho-ld doA 0on)$-nctional re6-irements are not directly concerned with speci$ic system $-nctions *-t speci$y re6-ired system properties or place constraints on the system or its development processA 8A.ist three types o$ non)$-nctional re6-irement? 9rod-ct re6-irementsA 1r!anisational re6-irementsA +,ternal re6-irementsA >A&hat is a domain re6-irement? 4ive an e,ampleA A re6-irements that is derived $rom the application domain o$ the system rather than $rom the speci$ic needs o$ system -sersA /or e,ample, in a train control system, the

re6-irement $or the train *rakin! system depends on characteristics o$ the train and the trackA HA&hat pro*lems can arise when re6-irements are written in nat-ral lan!-a!e? .ack o$ clarityA =e6-irements con$-sionA =e6-irements amal!amationA KA&hat is the distinction *etween the termsA?shall? and ?sho-ld? in a -ser re6-irements doc-ment? SShall normally indicates a mandatory re6-irementA SSho-ld indicates a desira*le *-t not essential re6-irementA RA&hy is it impossi*le to completely separate system re6-irements and desi!n? he system architect-re may have to *e desi!ned to str-ct-re the re6-irements speci$icationA +,istin! systems constrain the desi!n and these constraints are re6-irementsA he -se o$ a speci$ic architect-re may *e a re6-irement $or *-siness or re!-latory reasonsA DA&hat are the main advanta!es o$ -sin! a standard $ormat to speci$y re6-irements? All re6-irements have the same $ormat so are easier to readA he de$inition o$ $orm $ields mean that writers are less likely to $or!et to incl-de in$ormationA Some a-tomated processin! is possi*leA 1EA&hat are three types o$ inter$ace that may have to *e de$ined in a re6-irements doc-ment? 9roced-ral inter$acesA %ata str-ct-resA =epresentations o$ dataA 11A&hat is the so$tware re6-irements doc-ment? he o$$ical doc-ment that de$ines the re6-irements that sho-ld *e implemented *y the system developersA 15A.ist the re6-irements doc-ment sections s-!!ested *y the I+++ standardA Introd-ctionA 4eneral descriptionA Speci$ic re6-irementsA AppendicesA Inde,A 1A&hat perspectives may *e -sed $or system modellin!? An e,ternal perspectiveA A *ehavio-ral perspectiveA

A str-ct-ral perspectiveA 5A&hat types o$ system model may *e developed? %ata $low modelsA #omposition modelsA Architect-ral modelsA #lassi$ication modelsA Stim-l-sGresponse modelsA 7A&hat is descri*ed in a conte,t model? he immediate e,ternal environment o$ the system de$inin! the systems conte,t and the dependencies that a system has on its environmentA 8A&hat is descri*ed in a state machine model? Cow the system responds to e,ternal eventsA >A&hat is a semantic data model? A model that descri*es the lo!ical str-ct-re o$ the data processed *y a system or mana!ed *y a data*aseA HA&hat are the components o$ an o*<ect class de$inition in the U2.? he name o$ the o*<ect classA he attri*-tes o$ that classA he operations or methods associated with that classA KA&hat di$$erent o*<ect models may *e developed? Inheritance modelsA 1*<ect a!!re!ation modelsA 1*<ect *ehavio-r modelsA RA&hat is shown in an U2. se6-ence model? he se6-ence o$ interactions *etween o*<ects and actors in the system associated with a sin!le de$ined -se)caseA DA&hat is a str-ct-red method? A systematic way o$ prod-cin! models o$ an e,istin! system or o$ a system that is to *e *-iltA 1EA.ist $o-r weaknesses o$ str-ct-red methodsA hey do not s-pport non)$-nctional re6-irements modellin!A hey rarely incl-de !-idelines to help -sers decide i$ they can *e -sed in a partic-lar areaA hey tend to prod-ce too m-ch doc-mentationA he models prod-ced are detailed and o$ten hard to -nderstandA &hat are the sta!es in an o*<ect)oriented development process?

1*<ect)oriented analysisA 1*<ect)oriented desi!nA 1*<ect)oriented pro!rammin!A 5A&hat is the distinction *etween an o*<ect and an o*<ect class? An o*<ect is created at r-n)time *y instantiatin! an o*<ect classA he o*<ect incl-des state varia*les and operations on that state as de$ined in the o*<ect class de$initionA 7ABrie$ly descri*e two types o$ conc-rrent o*<ect implementationA ServersO he o*<ect is a parallel process with methods correspondin! to the o*<ect operationsA 2ethods e,ec-te in response to e,ternal re6-ests Active o*<ectsO he state o$ the o*<ect is chan!ed *y internal operations within the o*<ect itsel$A he process e,ec-tin! these operations r-ns contin-o-slyA 8A.ist the $ive key sta!es in an o*<ect)oriented desi!n processA Understand and de$ine the conte,t and -se o$ the systemA %esi!n the system architect-reA Identi$y the principal o*<ects in the systemA %evelop desi!n modelsA Speci$y o*<ect inter$acesA >A&hat do yo- -nderstand *y the system conte,t and model o$ -se? he system conte,t is a static model o$ the other systems in the environment o$ the system *ein! desi!nedA he model o$ -se is a dynamic model that descri*es how the system *ein! desi!ned interacts with its environmentA HAIn the architect-ral model o$ the weather station system, what are the three layers in the so$tware? he inter$ace layerA he data collection layerA he instr-ments layerA KA.ist $o-r approaches that may *e -sed to identi$y o*<ect classesA 4rammatical analysis identi$yin! no-ns and ver*sA Identi$y tan!i*le thin!s in the application domainA Use an approach *ased on the *ehavio-r o$ the systemA Use scenario)*ased analysisA RABrie$ly descri*e three desi!n models that are part o$ the U2.A S-*system models that show lo!ical !ro-pin!s o$ o*<ectsA Se6-ence models that show the se6-ence o$ o*<ect interactionsA State machine models that show state chan!es in response to eventsA DA&hat is the p-rpose o$ inter$ace desi!n in an 11 desi!n process?

o de$ine the si!nat-res and semantics o$ the inter$aces that are provided *y an o*<ect or !ro-p o$ o*<ectsA 1EABrie$ly e,plain why an 11 approach $acilitates desi!n evol-tionA he internal details o$ an o*<ect are hidden $rom other o*<ects so chan!in! these details is -nlikely to have knock)on e$$ects on other o*<ectsA &hat are the advanta!es o$ -sin! an incremental approach to so$tware development? Accelerated delivery o$ c-stomer servicesA User en!a!ement with the systemA 5A&hat is the key di$$erence *etween incremental development and prototypin!? Incremental development starts with the re6-irements that are *est -nderstood and that have the hi!hest priorityA 9rototypin! is intended to help -nderstand the re6-irements so starts with re6-irements that are not well -nderstoodA 7A.ist $ive important principles o$ a!ile methodsA #-stomer involvementA Incremental deliveryA 9eople not processA +m*race chan!eA 2aintain simplicityA 8A&hat are three important characteristics o$ e,treme pro!rammin!? =e6-irements e,pressed as scenariosA 9air pro!rammin!A est)$irst developmentA >A&hat is test)$irst development? &hen a system $eat-re is identi$ied, the tests o$ the code implementin! that $eat-re are written *e$ore the codeA ests are a-tomated and all tests are r-n when a new increment is added to the systemA HABrie$ly descri*e the advanta!e o$ pair pro!rammin!A It s-pports the idea o$ common ownership and responsi*ility $or the codeA It serves as an in$ormal code review processA It helps s-pport re$actorin!A KA&hat tools are normally incl-ded in a =A% environment? A data*ase pro!rammin! lan!-a!eA An inter$ace !eneratorA .inks to o$$ice applicationsA A report !eneratorA RA&hat is vis-al pro!rammin!?

An approach to development where a pro!rammer manip-lates !raphical icons representin! $-nctions, data or -ser inter$ace components and associates processin! scripts with these iconsA DAS-!!est three ways that a so$tware prototype may *e -sedA o help with the elicitation and validation o$ re6-irementsA o e,plore so$tware desi!n sol-tions and s-pport -ser inter$ace desi!nA o r-n *ack)to)*ack tests with the implemented systemA 1EA&hat were the key *ene$its o$ prototypin! $o-nd in 4ordon and Biemans st-dy? Improved system -sa*ility, a closer match to -sers needsA Improved system 6-ality, improved maintaina*ilityA =ed-ced development e$$ortA 1A.ist the main *ene$its o$ so$tware re-seA Increased dependa*ilityA =ed-ced process riskA +$$ective -se o$ specialistsA Standards complianceA Accelerated developmentA 5A.ist the main pro*lems with so$tware re-seA Increased maintenance costsA .ack o$ tool s-pportA 0ot)invented)here syndromeA #reatin! and maintainin! a component li*raryA /indin!, -nderstandin! and adaptin! componentsA 7A&hat key $actors sho-ld *e considered when plannin! re-se? he development sched-le $or the so$twareA he e,pected so$tware li$etimeA he *ack!ro-nd, skills and e,perience o$ the development teamA he criticality o$ the so$tware and its non)$-nctional re6-irementsA he application domainA he system delivery plat$ormA 8A&hat is a desi!n pattern and why are patterns important $or re-se? A desi!n pattern is a description o$ a pro*lem and the essence o$ its sol-tionA his sol-tion is e,pressed in a !eneric way and can *e instantiated and re-sed in di$$erent settin!sA >A&hat do 4amma et alA s-!!est are the $o-r essential elements o$ a desi!n pattern? A meanin!$-l nameA A description o$ the pro*lem and when the pattern can *e appliedA A sol-tion descriptionA A statement o$ the conse6-ences o$ applyin! the patternA

HA&hat is !enerator)*ased re-se? An approach to re-se where re-sa*le knowled!e is em*edded in a !enerator system which is pro!rammed *y domain e,perts to create the systemA An e,ec-ta*le system is then !eneratedA KA&hat ma<or so$tware pro*lem is addressed *y aspect)oriented so$tware development? he pro*lem o$ separation o$ concerns so that a so$tware -nit is desi!ned to do one thin! and one thin! onlyA RA&hat are three possi*le classes o$ application $ramework? System in$rastr-ct-re $rameworksA 2iddleware inte!ration $rameworksA +nterprise application $rameworksA DA&hat desi!n choices have to *e made when re-sin! #1 S prod-cts? &hich #1 S prod-cts o$$er the most appropriate $-nctionalityA Cow data will *e e,chan!ed *etween di$$erent prod-ctsA &hat $eat-res o$ a prod-ct will act-ally *e -sedA 1EA.ist $o-r types o$ specialisation o$ so$tware prod-ct linesA 9lat$orm specialisationA +nvironment specialisationA /-nctional specialisationA 9rocess specialisationA 1A&hat are the two complementary !oals o$ the testin! process? o demonstrate that the so$tware meets its re6-irementsA o discover $a-lts or de$ects in the so$twareA 5A&hat is a s-ccess$-l de$ect test? A s-ccess$-l de$ect test is one where the systems operation does not con$orm to its speci$ication, iAeA one that e,poses a de$ect in the systemA 7ABrie$ly descri*e the two distinct phases o$ system testin!A Inte!ration testin! where the components and s-*systems makin! -p the system are inte!rated and testedA he inte!ration team have access to the so-rce code o$ the systemA =elease testin! where the version o$ the system to *e released to -sers is testedA he release testin! team treat the system as a *lack)*o, while testin!A 8A&hat !-idelines does &hittaker s-!!est $or de$ect testin!? #hose inp-ts that $orce all error messa!es to *e !eneratedA %esi!n inp-ts that mi!ht ca-se *-$$ers to over$lowA =epeat the same inp-t n-mero-s timesA /orce invalid o-tp-ts to *e !eneratedA /orce comp-tation res-lts to *e too lar!e or too smallA

>A&hat is the $-nction o$ stress testin!? o test the $ail-re *ehavio-r o$ the systemA o stress the system and *rin! de$ects to li!ht that mi!ht not normally *e discoveredA HA&hat tests sho-ld *e incl-ded in o*<ect class testin!? ests $or all operations in isolationA ests that set and access all o*<ect attri*-tesA ests that $orce the o*<ect into all possi*le statesA KA&hat are the three important classes o$ inter$ace errors? Inter$ace mis-seA Inter$ace mis-nderstandin!A imin! errorsA RA&hat three approaches may *e -sed when desi!nin! test cases? =e6-irements)*ased testin! where test cases are desi!ned $rom the re6-irementsA 9artition testin! where inp-t and o-tp-t partitions are identi$ied and testedA Str-ct-ral testin! where knowled!e o$ the pro!rams str-ct-re is -sed to desi!n testsA DA&hat is an e6-ivalence partition? 4ive an e,ampleA A class o$ inp-ts or o-tp-ts where it is reasona*le to e,pect that the system will *ehave the same way $or all mem*ers o$ the classA /or e,ample, all strin!s with less than 5>H charactersA 1EA&hat is path testin!? A str-ct-ral testin! strate!y whose o*<ective is to e,ercise every independent path thro-!h a pro!ramA

1A&hat is meant *y con$i!-ration mana!ement? he development and -se o$ standards and proced-res $or mana!in! an evolvin! so$tware systemA 5A&hat is a *aseline? A controlled system where chan!es to the system have to *e a!reed and recorded *e$ore they are implementedA 7A&hat sho-ld *e incl-ded in a con$i!-ration mana!ement plan? he con$i!-ration items to *e mana!edA he people responsi*le $or mana!ementA he con$i!-ration mana!ement policiesA he #2 tools to *e -sedA he schema o$ the con$i!-ration data*aseA

8A&hy is it necessary to de$ine a con$i!-ration item identi$ication scheme? Beca-se there may *e tho-sands o$ so-rce code mod-les, test scripts, desi!n doc-ments, etcA in a lar!e pro<ectA Fo- have to *e a*le to -ni6-ely identi$y and locate any speci$ic item and so a -ni6-e namin! scheme is re6-iredA >A&hat in$ormation may *e incl-ded in a con$i!-ration data*ase? In$ormation a*o-t con$i!-ration items s-ch as data o$ creation, creator, etcA In$ormation a*o-t -sers o$ components, system c-stomers, e,ec-tion plat$orms, and proposed chan!es to the systemA HA&hat are the o*<ectives o$ chan!e mana!ement proced-res? o analyse the costs and *ene$its o$ proposed chan!es, approvin! chan!es that are worthwhile, and trackin! which components o$ the system have *een chan!edA KA&hat is the role o$ a chan!e control *oard? o assess the impact o$ proposed chan!es $rom a strate!ic and or!anisational perspective rather than a technical perspectiveA hey sho-ld decide i$ chan!es are worthwhile and sho-ld prioritise chan!es to *e implementedA RA&hat is the di$$erence *etween a system version and a system release? A system version is an instance o$ a system that di$$ers, in some ways, $rom other instancesA A system release is a version that is released to c-stomersA DA&hat are the advanta!es o$ attri*-te)*ased version identi$ication? &hen selectin! components, yo- do not need to speci$y the version n-m*er 'an error) prone process i$ there are many components( *-t simply list the re6-ired component attri*-tesA 1EA&hat may *e incl-ded in a system release? he e,ec-ta*le code o$ a systemA #on$i!-ration $ilesA %ata $ilesA An installation pro!ramA +lectronic and paper doc-mentation, packa!in! and p-*licityA 11A&hat are the key iss-es in system *-ildin!? Cave all components *een incl-ded? Are the ri!ht versions o$ components incl-ded? Are all re6-ired data $iles availa*le? Are the data $iles properly re$erenced? Is the appropriate version o$ the compiler and other tools availa*le? 15A&hat are the two types o$ #2 work*ench? 1pen work*enches that incl-de #2 tools $rom di$$erent s-ppliersA Inte!rated work*enches that provide inte!rated $acilities $or version mana!ement, system *-ildin! and chan!e trackin!A

17A&hat $acilities mi!ht *e provided in system *-ildin! #AS+ tools? A dependency speci$ication lan!-a!e and interpreterA ool selection and instantiation s-pportA %istri*-ted compilationA %erived o*<ect mana!ementA &hat are the key standards $or we* service)oriented architect-res? S1A9 B messa!e interchan!eA &S%. B service inter$ace descriptionA U%%I B service discovery in$ormationA &S)B9+. B work$low lan!-a!eA 5A&hat is the de$inition o$ a 'we*( service? A loosely co-pled re-sa*le so$tware component that encaps-lates discrete $-nctionality which may *e distri*-ted and pro!rammatically accessedA A we* service is a service that is accessed -sin! standard Internet and N2.)*ased protocolsA 7A&hat are the components o$ a &S%. speci$ication? he inter$ace speci$ication that de$ines the operations and messa!e $ormatsA he *indin! which maps the a*stract inter$ace to a concrete set o$ protocolsA he location part which de$ines where the service implementation is locatedA 8A&hat is service en!ineerin!? he process o$ developin! services $or re-se in service)oriented applicationsA >A&hat are the three $-ndamental types o$ service that may *e identi$ied? Utility services B implement some !eneral $-nctionalityA B-siness services B associated with a speci$ic *-siness $-nctionA #oordination services B provide s-pport $or a *-siness processA HA&hat are the three sta!es in service inter$ace desi!n? .o!ical inter$ace desi!n where operations, inp-ts and o-tp-ts are identi$iedA 2essa!e desi!n where the str-ct-re o$ messa!es sent and received is desi!nedA &S%. development where the a*stract service inter$ace is desi!nedA KA&hat in$ormation is maintained in a U%%I description? %etails o$ the *-siness providin! the serviceA An in$ormal description o$ the service $-nctionalityA In$ormation on where to $ind the &S%. service speci$icationA S-*scription in$ormation $or -ser re!istrationA RACow can we* services *e -sed to $acilitate the -se o$ le!acy systems? he le!acy system $-nctionality is hidden *y Swrappin! it in a we* service which is accessed *y e,ternal applicationsA hese applications there$ore do not need to know the protocols and data str-ct-res -sed *y the le!acy systemA

DA%e$ine Sso$tware development with servicesA he creation o$ pro!rams *y composin! and con$i!-rin! services to create new composite servicesA 1EA&hat is a work$low? A se6-ence o$ activities, ordered in time, that make -p a coherent *-siness processes with each activity carryin! o-t some part o$ the work o$ that processA 11A&hat are the sta!es in service constr-ction *y composition? /orm-late o-tline work$lowA %iscover servicesA Select possi*le servicesA =e$ine work$lowA #reate work$low pro!ramA est completed service or applicationA 15A&hat is the di$$erence *etween B920 and &S)B9+.? B920 is a !raphical lan!-a!e $or de$inin! work$lows whereas &S)B9+. is a lower) level N2.)*ased lan!-a!eA 17A.ist $ive pro*lems in testin! service)oriented systemsA Services $rom an e,ternal provider may chan!e so are not the services ori!inally testedA %ynamic service *indin! may mean that the *o-nd service is -npredicata*leA he non)$-nctional *ehavio-r o$ the service may vary $rom time to time *eca-se o$ load which is o-tside the testers controlA estin! is e,pensive i$ services are char!ed on a per -se *asisA #ompensatin! actions may *e di$$ic-lt to testA 1A&hat are the advanta!e o$ e,plicitly desi!nin! and doc-mentin! a so$tware architect-re? It improves stakeholder comm-nicationsA It enco-ra!es a detailed analysis o$ the systemA It helps with lar!e)scale re-seA 5A&hat non)$-nctional re6-irements may *e in$l-enced *y the choice o$ system architect-re? 9er$ormance, sec-rity, sa$ety, availa*ility, maintaina*ilityA 7A.ist $o-r $-ndamental 6-estions that sho-ld *e addressed in architect-ral desi!nAIs there a !eneric application architect-re that can *e -sed? Cow will the system *e distri*-ted? &hat architect-ral style or styles are appropriate? Cow sho-ld the system *e str-ct-red? &hat control strate!y sho-ld *e -sed? +tcA

8A&hat architect-ral models may *e developed? A static str-ct-ral modelA A dynamic process modelA An inter$ace modelA =elationship modelsA A distri*-tion modelA >A&hat is the $-ndamental characteristic o$ a repository model? All shared data is held in a central data*ase that can *e accessed *y all s-*)systemsA HACow is the system or!anised in a client)server model? A set o$ services is provided *y servers and clients access and -se these servicesA KA&hat are the two principle styles -sed $or mod-lar decomposition? 1*<ect)oriented decompositionA /-nction)oriented pipelinin!A RABrie$ly descri*e $-nction)oriented pipelinin!A he system is decomposed into a set o$ $-nctional trans$ormations that cons-me inp-ts and prod-ce o-tp-tsA %ata $lows $rom one $-nction to another 'the pipeline( and is trans$ormed as it passes thro-!h the se6-enceA DA&hat are the two main types o$ event)driven control models? Broadcast models where an event is *roadcast to all s-*)systemsA Interr-pt)driven models where e,ternal events are detected and processed *y an interr-pt handlerA 1EA&hat is a re$erence architect-re? An a*stract model o$ a system class that can *e -sed to in$orm desi!ners a*o-t the !eneral str-ct-re o$ that type o$ systemA 1A&hat is the distinction *etween validation and veri$ication? IalidationO Are we *-ildin! the ri!ht prod-ct? Ieri$icationO Are we *-ildin! the prod-ct ri!ht? 5A&hat are the two complementary approaches -sed $or checkin! and analysis? So$tware inspections or peer reviewsA So$tware testin!A 7A&hat are the principal sections incl-ded in a test plan? he testin! processA =e6-irements tracea*ilityA ested itemsA estin! sched-leA est recordin! proced-resA Cardware and so$tware re6-irementsA #onstraintsA

8A&hat are the advanta!es o$ inspections over testin!? Inspections can discover many errorsA In testin!, one error may mask anotherA Incomplete versions o$ a system can *e inspectedA Inspections can consider *roader 6-ality attri*-tes as well as pro!ram de$ectsA >A&hat are the sta!es in the so$tware inspection process? 9lannin!A 1verviewA Individ-al preparationA Inspection meetin!A =eworkA /ollow)-pA HA.ist the classes o$ $a-lts that sho-ld *e considered in an inspection checklistA%ata $a-ltsA #ontrol $a-ltsA Inp-tGo-tp-t $a-ltsA Inter$ace $a-ltsA Stora!e mana!ement $a-ltsA +,ception mana!ement $a-ltsA KA&hat is a-tomated static analysis? A process where an analysis pro!ram e,amines the so-rce code lookin! $or possi*le anomaliesA hese are drawn to the inspectors attention as they may represent $a-lts in the pro!ramA RA&hat are the main ar!-ment $or the -se o$ $ormal speci$ication and veri$ication? /ormal speci$ication $orces a detailed analysis o$ the re6-irements so reveals errors and anomaliesA /ormal veri$ication demonstrates that the pro!ram meets its speci$ication so implementation errors do not compromise dependa*ilityA DA&hy do $ormal speci$ication and veri$ication not !-arantee relia*ility? he speci$ication may not re$lect the real re6-irements o$ -sersA he proo$ may contain errorsA he proo$ may ass-me a -sa!e pattern which is incorrectA 1EA&hat are the $ive key strate!ies -sed in cleanroom development? /ormal speci$icationA Incremental developmentA Str-ct-red pro!rammin!A Static veri$icationA Statistical testin!A 1A&hat is the distinction *etween application and in$rastr-ct-re sec-rity?

Application sec-rity B the application is desi!ned to resist attacksA In$rastr-ct-re sec-rity B the so$tware is con$i!-red to resist attacksA 5A%e$ine the sec-rity terms Sv-lnera*ility and SassetAI-lnera*ilityO A weakness in a comp-ter system that 2AF *e e,ploited to ca-se loss or harmA AssetO A system reso-rce that has a val-e and so sho-ld *e protectedA 7A&hat is sec-rity risk mana!ement? Sec-rity risk mana!ement is concerned with assessin! the possi*le losses that mi!ht ens-e $rom attacks on assets in the system and *alancin! these losses a!ainst the costs o$ sec-rity proced-res that may red-ce the lossesA 8A&hat are the sta!es o$ preliminary risk assessment? Asset identi$icationA Asset val-e assessmentA +,pos-re assessmentA hreat identi$icationA hreat pro*a*ility assessmentA #ontrol identi$icationA /easi*ility assessmentA Sec-rity re6-irements de$initionA >AS-!!est two possi*le v-lnera*ilities when lo!inGpassword a-thentication is -sedAUsers set !-essa*le passwordsA A-thorised -sers reveal their passwords to -na-thorised -sers, perhaps thro-!h some social en!ineerin! processA HA&hat $-ndamental iss-es have to *e considered when desi!nin! system architect-re $or sec-rity? 9rotectionO Cow sho-ld the system *e or!anised so that critical assets can *e protected a!ainst an e,ternal attackA %istri*-tionO Cow sho-ld system assets *e distri*-ted so that the e$$ects o$ a s-ccess$-l attack are minimisedA KA&hat are the three levels o$ protection that mi!ht *e -sed in an in$ormation system? 9lat$orm)level protectionA Application)level protectionA =ecord)level protectionA RA.ist $o-r desi!n !-idelines $or sec-re systems en!ineerin!ABase sec-rity decisions on an e,plicit sec-rity policyA Avoid a sin!le point o$ $ail-reA Use red-ndancy and diversity to red-ce riskA Ialidate all inp-tsA '1thers in /i!A 7EA1EA(

DA&hy is it important to desi!n $or deployment? Beca-se many sec-rity v-lnera*ilities are introd-ced when the system is con$i!-red $or -se in its deployment environmentA 1EA&hat deployment s-pport may *e incl-ded in a system? S-pport $or viewin! and analysin! con$i!-rationsA %e$a-lt privile!e minimisationA #on$i!-ration settin! localisationA +asy ways to $i, sec-rity v-lnera*ilitiesA 11A&hat are the three complementary strate!ies to achieve s-rviva*ility? =esistanceA =eco!nitionA =ecoveryA 15A.ist the sta!es in s-rviva*ility analysisA=eview system re6-irements and architect-reA Identi$y critical services and componentsA Identi$y attacks and compromisa*le componentsA Identi$y so$tspots and s-rviva*ility strate!iesA &hich system model is descri*ed in the $ollowin! !raphic? "[A]%ata)$low models [B]State machine models [#]#onte,t models [%]1*<ect models #han!e re6-est is proposal d-e to [A]2arket $orces [B]#-stomers [#]%evelopers "[%]All o$ the others &hat?s the di$$erence *etween $-nctional and non)$-nctional re6-irements? [A] he $-nctional re6-irement is descri*ed in details, the other is descri*ed in hi!h)level a*stract "[B]0one o$ the others [#] he $-nctional re6-irement descri*es system properties and constraints, the other descri*es system services &hat are the -ser re6-irements? "[A] he statements in a nat-ral lan!-a!e pl-s dia!rams that descri*e the services? system and their constraints [B] he hi!h)level a*stract re6-irement [#] he re6-irements are written $or contractor mana!ers [%]All o$ the others

S-!!est a most appropriate so$tware process model that mi!ht *e -sed as a *asic $or mana!in! the developin! o$ the so$tware system that s-pport cate!ori@in! !oods *ased on cons-mption pattern, trackin! payments $rom the c-stomersA "[A] he water$all model [B]All o$ the others [#]#omponent)*ased so$tware en!ineerin! model [%]Incremental delivery model Cow is the system or!ani@ed in a client)server model? [A]A set o$ services is provided *y clients and servers access and -se these services [B]All o$ the others "[#]0one o$ the others [%]A set o$ services is provided *y servers and clients access and -se these services &hich o$ the $ollowin! statements a*o-t the di$$erences *etween inte!ratin! testin! and component testin! are tr-e? "[A] he inte!ratin! testin! test the res-lt o$ the component while the component testin! test its internal str-ct-re [B]All o$ the others [#] he inte!ratin! testin! tests the res-lt o$ the component interaction [%] he component testin! tests the system?s !oals that will *e applied to inte!ratin! system &hich o$ the $ollowin! statements a*o-t pro<ect mana!ement is tr-e? [A] he process o$ pro<ect plannin! is strai!ht$orward [B]All o$ the others "[#] he intan!i*ility o$ so$tware systems poses special pro*lems $or so$tware pro<ect mana!ement [%] he *est pro!rammers always make the *est so$tware mana!ers &hat are the distinctions *etween an o*<ect and an o*<ect class? "[A]All o$ the others [B] he o*<ect incl-des state varia*les and operations on that state as de$ined in the o*<ect class de$inition [#]An o*<ect is created at r-n)time *y instantiatin! an o*<ect classA &hich o$ the $ollowin! is 01 a disadvanta!e o$ str-ct-red methods? "[A] here are not many #AS+ tools that s-pport str-ct-red methods [B] hey tend to prod-ce too m-ch doc-mentation [#] hey do not s-pport non)$-nctional re6-irements modelin! [%] hey rarely incl-de !-idelines to help -sers decide i$ they can *e -sed in a partic-lar area [+] he models prod-ced are detailed and o$ten hard to -nderstand he economies o$ all developed nations are dependent on so$twareA

"[A] r-e [B]/alse I$ per$ormance is a critical re6-irement the architect-re sho-ld *e desi!ned to "[A]locali@e critical operations and minimi@e comm-nications3 -se lar!e rather than $ine) !rain components [B]All o$ the others [#]incl-de red-ndant components and mechanisms $or$a-lt tolerance [%]-se a layered architect-re with critical assets in the inner layers &hich o$ the $ollowin! does 01 *elon! to important principles o$ a!ile methods? [A]+m*race chan!e "[B]9rocess not people [#]Incremental delivery [%]#-stomer involvement [+]2aintain simplicity &hat are the advanta!es o$ e,plicitly desi!nin! and doc-mentin! so$tware architect-re? [A]It improves stakeholder comm-nications "[B]All o$ the others [#]It enco-ra!es a detailed analysis o$ the system &hich o$ the $ollowin! statements a*o-t test $irst development are tr-e? "[A]All o$ the others [B]&hen a system $eat-re is identi$ied, the tests o$ the code implementin! that $eat-re are written *e$ore the code [#] ests are a-tomated and all tests are r-n when a new increment is added to the systemA &hat is the pro*lem that cannot arise when re6-irements are written in nat-ral lan!-a!e? [A].ack o$ clarity [B]=e6-irement con$-sion [#]=e6-irement amal!amation "[%].ack o$ -ser?s -nderstanda*ility All o$ the $allowin!s are main *ene$its o$ so$tware re-se +N#+9 [A]Accelerated development "[B]=ed-ce maintenance costs [#]Increased dependa*ility [%]=ed-ced process risk [+]+$$ective -se o$ specialists

&hich o$ the $ollowin! statements a*o-t testin! is 01 tr-e? [A] estin! can only show the presence o$ errors in a pro!ram "[B]Its !oal is to $i, errors o$ the so$tware system

[#]0one o$ the others [%]It cannot demonstrate that there are no remainin! $a-lts &hich o$ the $ollowin! statement a*o-t the two distinct phases o$ system testin! is 01 tr-e? [A] he release testin! team treat the system as a *lack)*o,while testin! [B]0one o$ the others [#]=elease testin! where the version o$ the system to *e released to -sers is testedA [%]Inte!ration testin! where the components and s-*systems makin! -p the system are inte!rated and tested "[+] he inte!ration team does 01 have access to the so-rce code o$ the systemA &hich o$ the $ollowin! statements a*o-t +nterprise =eso-rce 9lannin! '+=9( systems is 01 tr-e? [A]Speci$ic +=9 systems are created *y con$i!-rin! a !eneric system at development time with in$ormation a*o-t the c-stomer?s *-siness "[B]+nterprise =eso-rce 9lannin! systems are very widely -sed [#]All o$ the others &hat is the second sta!e o$ risk mana!ement process? [A]=isk plannin! [B]=isk monitorin! "[#]=isk analysis [%]=isk identi$ication Both the water$all model o$ the so$tware process and the prototypin! model can *e accommodated in the spiral process modelA [A]/alse "[B] r-e &hich o$ the $ollowin! is a type o$ so$tware process model that represents the roles o$ the people involved in the so$tware process and the activities $or which they are responsi*le? [A]An actor model "[B]An roleGaction model [#]0one o$ the others [%]An activity model &hat does comp-ter science concern with? "[A]#omp-ter science is concerned with theories and methods that -nderlie comp-ters and so$tware systems [B]#omp-ter science is concerned with the practicalities o$ developin! and deliverin! -se$-l so$tware [#]All o$ the others &hat are incl-ded in a 6-ality plan? [A] he reso-rces and sched-le -sed $or system validation

[B]All o$ the others "[#] he 6-ality proced-res and standards that sho-ld *e -sed in a pro<ect &hich o$ the $ollowin!s *elon! to Server type o$ conc-rrent o*<ect implementation? "[A] he o*<ect is a parallel process with methods correspondin! to the o*<ect operationsA 2ethods e,ec-te in response to e,ternal re6-ests [B] he state o$ the o*<ect is chan!ed *y internal operations within the o*<ect itsel$A he process e,ec-tin! these operations r-ns contin-o-slyA [#]All o$ the others &hat is meant *y con$i!-ration mana!ement? [A]All o$ the others [B]#on$i!-ration mana!ement is concerned with ens-rin! that so$tware has a low n-m*er o$ de$ects and that it reaches the re6-ired standards o$ maintaina*ility, relia*ility, and porta*ility and so on "[#] he development and -se o$ standards and proced-res $or mana!in! an evolvin! so$tware system &hich o$ the $ollowin! statements a*o-t Service)oriented so$tware en!ineerin! is tr-e? "[A]Service)oriented so$tware en!ineerin! is *ased on the notion that pro!rams can *e constr-cted *y composin! independent services that encaps-late re-sa*le $-nctionality [B]Services are lan!-a!e dependent and their implementation is *ased on widely adopted N2.)*ased standards [#]All o$ the others &hich o$ the $allowin!s does 01 *elon! to the important di$$erences *etween so$tware pro<ect mana!ement and other types o$ pro<ect mana!ement? [A] here are no standard $or so$tware processes [B].ar!e so$tware pro<ects are o$ten one)o$$ pro<ects [#] he prod-ct 'so$tware( is intan!i*le "[%]#ost o$ so$tware pro<ect maintenance is hi!her than other type o$ pro<ects is concerned with developin! an oriented system model to implement re6-irements "[A]1*<ect)oriented Analysis [B]1*<ect)oriented %esi!n [#]1*<ect)oriented 9aradi!m [%]0one o$ the others &hat are system re6-irements? [A]0one o$ the others [B]=e6-irements that come $rom the application domain o$ the system and that re$lect characteristics o$ that domain "[#]A str-ct-red doc-ment settin! o-t detailed descriptions o$ the system?s $-nctions, services and operational constraintsA [%]Statements in nat-ral lan!-a!e pl-s dia!rams o$ the services the system provides and its operational constraintsA &ritten $or c-stomers

&hat key $actors sho-ld *e considered when plannin! re-se? "[A]All o$ the others [B] he development sched-le $or the so$tware [#] he *ack!ro-nd, skills and e,perience o$ the development team [%] he e,pected so$tware li$etime Applications $rameworks are collections o$ concrete and a*stract o*<ects that are desi!ned to *e re-sed thro-!h speciali@ation and the addition o$ new o*<ectsA [A]/alse "[B] r-e All o$ the $ollowin! are the main *ene$its o$ so$tware re-se +N#+9 [A]Increased dependa*ility [B]+$$ective -se o$ specialists, standards compliance [#]Accelerated development "[%]=ed-ce maintain cost [+]=ed-ced process risk &hich o$ the $ollowin! statements a*o-t +6-ivalence partitionin! are 01 tr-e? [A]+6-ivalence partitionin! is a way o$ derivin! test cases [B]1$ten, the val-e that is most likely to lead to a s-ccess$-l testis a val-e at the *o-ndary o$ a partitionA [#]It depends on $indin! partitions in the inp-t and o-tp-t data sets and e,ercisin! the pro!ram with val-es $rom these partitions "[%]0one o$ the others &hich o$ these statements a*o-t e,treme pro!rammin! are tr-e? [A]All tests sho-ld only *e r-n in the last time [B]All o$ the others [#]Increments are delivered to c-stomers at the end o$ process "[%]0ew versions may *e *-ilt several times per day &hich o$ the $ollowin! are the testin! process !oals? [A]%iscover $a-lts or de$ects in the so$tware [B] he check that the so$tware meets its re6-irements "[#]All o$ the others &hich o$ the $ollowin! statements a*o-t service inter$aces is tr-e? "[A]All o$ the others [B]Service inter$aces are de$ined in an N2.)*ased lan!-a!e called &S%. [#]A &S%. speci$ication incl-des a de$inition o$ the inter$ace types and operations, the *indin! protocol -sed *y the service and the service location &hich o$ the $ollowin! statements a*o-t sec-rity is 01 tr-e? [A]0one o$ the others

[B]Sec-rity en!ineerin! $oc-ses on how to develop and maintain so$tware systems that can resist malicio-s attacks that are intended to dama!e a comp-ter)*ased system or its data "[#]Sec-rity threats can *e threats to the only con$identiality and inte!rity o$ a system or its dataA [%]Sec-rity risk mana!ement involves assessin! the losses that mi!ht ens-e $rom attacks on a system and derivin! sec-rity re6-irements that are aimed at eliminatin! or red-cin! these lossesA All o$ the $ollowin! are sta!es in an o*<ect)oriented development process +N#+9 ? [A]1*<ect)oriented analysis [B]1*<ect)oriented desi!n "[#]1*<ect)oriented evol-tion [%]1*<ect)oriented pro!rammin! &hat are the components o$ an o*<ect class de$inition in the U2.? "[A]All o$ the others [B] he name o$ the o*<ect class [#] he operations or methods associated with the class [%] he attri*-tes o$ the class All o$ the $ollowin! statement a*o-t desi!n pattern are tr-e +N#+9 ' tat ca de- d-n!( [A]A pattern description sho-ld incl-de a pattern name, a pro*lem and sol-tion description, and a statement o$ the res-lts and trade)o$$s o$ -sin! the pattern [B] hey are $-ndamental to desi!n re-se in o*<ect)oriented development [#]%esi!n patterns are detail)level a*stractions that doc-ment s-ccess$-l desi!n sol-tionsA S-!!est the most appropriate !eneric so$tware process model that mi!ht *e -sed as a *asic $or mana!in! the development o$ the $ollowin! systemO A -niversity acco-ntin! system that replaces an e,istin! system "[A]&ater$all model [B] hrow)away prototypin! [#]+,ploratory development [%]0one o$ the others =e6-irements are -s-ally presented atT and T levels o$ detail in re6-irements doc-ment "[A]a hi!h level statementG a detailed system speci$ication [B]a hi!h level statementG a -ser speci$ication [#]All o$ the others [%]a hi!h level statementG a low system speci$ication &hat are advanta!es o$ pipeline model? [A]Int-itive or!ani@ation $or stakeholder comm-nication "[B]All o$ the others [#]+asy to add new trans$ormations

[%]S-pports trans$ormation re-se All o$ the $allowin!s are the ways that a so$tware prototype may *e -sed +N#+9 "[A] o test all $-nctions o$ the completed system [B] o r-n *ack)to)*ack tests with the implemented system [#] o e,plore so$tware desi!n sol-tions and s-pport -ser inter$ace desi!n [%] o help with the elicitation and validation o$ re6-irements &hich o$ the $ollowin! is 01 o*<ect model that may *e developed? [A]1*<ect a!!re!ation models "[B]&ork$low model [#]1*<ect *ehavior model [%]Inheritance models &hat is application sec-rity? [A]Application sec-rity is a systems mana!ement pro*lem where the in$rastr-ct-re is con$i!-red to resist attacksA [B]All o$ the others "[#]Application sec-rity is a so$tware en!ineerin! pro*lem where the system is desi!ned to resist attacks he chan!e control *oard assess the impact o$ proposed chan!es $rom a strate!ic and or!ani@ational perspective rather than a technical perspective [A]/alse "[B] r-e &hat can *e represented *y a work$low model? [A] he process as a set o$ activities, each o$ which carries o-t some data trans$ormationA [B] he roles o$ the people involved in the so$tware process and the activities $or which they are responsi*le [#]All o$ the others "[%] he se6-ence o$ activities in the process alon! with their inp-ts, o-tp-ts and dependenciesA &hich o$ the $ollowin! re6-irement statements *elon!s to $-nctional re6-irements? [A] he system is implemented *y -sin! Uava, 1racle data*ase [B] he response time $or each screen is m-st *e less than 5 seconds "[#]An article in$ormation shall incl-de A-thor, itle, %escription and other related in$ormation [%] he -ser inter$ace shall *e implemented as simple C 2. witho-t $rames he &ater$all approach is the B+S approach to development so$tware when "[A] he re6-irements are well)-nderstood and chan!es will *e $airly limited d-rin! the desi!n process [B]Addin! some new $eat-res to a system [#]Un)sta*le re6-irement systems

[%]So$tware system is small, -nclear re6-irements %omain re6-irements may *e $-nctional or non)$-nctional re6-irements [A]/alse "[B] r-e &hat is the *asis o$ sched-le and cost estimates in the e,treme pro!rammin!? [A] he way that the team wo-ld develop the test)$irst [B] he overall re6-irements that c-stomer provide to the team "[#] he tasks that are *roken down *y the team $rom the scenarios or -ser stories written cards [%] he way that the team wo-ld per$orm code re$actorin! he term ?#AS+? is the acronym o$ [A]#omp-ter Aided System +n!ineer "[B]#omp-ter)Aided So$tware +n!ineerin! [#]#omp-tin! A-tomation System +,tension &hich is the $irst sta!e in an o*<ect)oriented desi!n process? [A]Speci$y o*<ect inter$acesA "[B]%evelop an -nderstandin! o$ the relationships *etween the so$tware *ein! desi!ned and its e,ternal environment [#]Identi$y the principal system o*<ects3 [%]%esi!n the system architect-re Select the B+S model when yo- want to desi!n a so$tware system that very $ast responses to events is a critical re6-irement? "[A]Interr-pt)driven model [B]2ana!er model [#]#all)ret-rn model [%]Broadcast model &hat are the p-rposes o$ system modellin!? '#hoose one( [A] o validate -ser re6-irement, de$ine the *o-ndaries o$ the system [B] o de$ine the *o-ndaries o$ the system, validate system re6-irement "[#] o help the analyst to -nderstand more a*o-t the $-nctionalities o$ the system, and help comm-nicatin! with c-stomer &hich is the ri!ht se6-ence in the risk mana!ement process? '1( =isk analysis '5( =isk identi$ication '7( =isk monitorin! '8( =isk plannin! [A]1:;8:;5:;7 "[B]5:;1:;8:;7 [#]1:;5:;8:;7

[%]5:;1:;7:;8 1*<ect identi$ication is a'n(Tprocess [A]&ater$all "[B]Iterative [#]=ec-rsive &hat is S1A9 standard? [A]%e$ines the components o$ a service speci$ication that may *e -sed to discover the e,istence o$ a service [B] his standard allows a service inter$ace and its *indin!s to *e de$ined "[#]A messa!e e,chan!e standard that s-pports service comm-nication [%]A standard $or work$low lan!-a!es -sed to de$ine service composition In &ater$all approach, which phase takes the least cost? [A]%esi!n [B]Inte!ration and testin! [#]%evelopment "[%]Speci$ication 4iven the pro<ect activities chart as *elow, please de$ine the critical path 'the val-es mention in each arrow are activity name and activity d-ration( "[A]A/%+I [B]AB#I+ [#]A/4CI [%]AB#I here are only one approach to re-se so$tware applications or components that can *e -sedA [A] r-e "[B]/alse &hat are sta!es o$ service inter$ace desi!n? [A].o!ical inter$ace desi!n, Uava o*<ect inter$ace desi!n, &S%. description "[B].o!ical inter$ace desi!n, 2essa!e desi!n, &S%. description [#].o!ical inter$ace desi!n, 2essa!e desi!n, Uava o*<ect inter$ace desi!n &hich one o$ the $ollowin! statements a*o-t system testin! is 01 tr-e? [A]System tests are o$ten per$ormed *y independent teamsA [B]/-nctional testin! is -sed more than str-ct-ral testin!A [#]/a-lts $o-nd d-rin! system tests can *e very e,pensive to $i,A "[%]+nd)-sers sho-ld *e involved in system testsA Be$ore doin! inte!ration testin! this testin! m-st have *een done "[A]Unit testin! [B]System testin!

[#]Stress testin! Acceptance testin! will *e done *y [A]%eveloper [B]9ro<ect mana!er "[#]User [%] ester he decision where the pro!rammers can re-se a pattern or need to develop a special) p-rpose sol-tion always easy [A] r-e "[B]/alse &hat is &S%. standard? [A]A standard $or work$low lan!-a!es -sed to de$ine service composition "[B] his standard allows a service inter$ace and its *indin!s to *e de$ined [#]A messa!e e,chan!e standard that s-pports service comm-nication [%]%e$ines the components o$ a service speci$ication that may *e -sed to discover the e,istence o$ a service