cia3250 ch7

Risk mitigation involves the reduction in either the likelihood or the impact of the occurrence of a risk. T/F

True

In the context of Capability Maturity Model Integration, process is ad hoc and chaotic; organization tends to overcommit and processes are often abandoned during times of crisis in which of the following maturity levels?

quantitatively managed

managed

defined

initial

initial

After an organization decides to adopt which of the following, it must conduct an assessment of its software development practices to determine where they fit in the capability model?

QA

software development methodology

software quality management

CMMI-DEV

CMMI-DEV

A type of business system which is used to develop accurate forecasts of customer demand, recommend stocks and bonds for an investment portfolio is known as which of the following?

upgrade management system

decision support system

executive information system

data information system

decision support system

Capability Maturity Model Integration (CMMI) is a process improvement approach that defines the essential elements of effective processes. T/F

True

A primary cause of poor software quality is that developers do not know how to design quality into software from the very start, or do not take the time to do so. T/F

True

In the context of developing safety-critical systems, the safety engineer's role is limited to producing a hazard log. T/F

False

An airline's online ticket-reservation system and an electronic funds transfer system that moves money among banks, are examples of which of the following?

order-processing systems

decision support systems

software development systems

quality assurance systems

order-processing systems

An important technique used to develop ISO 9001-compliant quality systems by both evaluating reliability and determining the effects of system and equipment failures is which of the following?

DO-178B/EUROCCAE ED-128

N-version programming

Failure mode and effects analysis (FMEA)

Capability Maturity Model Integration (CMMI)

Failure mode and effects analysis (FMEA)

Under the doctrine of supervening event, the original seller is not liable if the software was materially altered after it left the seller's possession and the alteration caused the injury. T/F

True

Black-box testing treats the software unit as a device that has expected input and output behaviors but whose internal workings are known. T/F

False

Software product liability claims are typically based on strict liability, negligence, breach of warranty, or misrepresentation. T/F

True

A failure mode describes how a product or process could fail to perform the desired functions described by the customer. T/F

True

In integration testing, special software programs called static analyzers are run against the new code. T/F

False

Which of the following is an approach to minimizing the impact of software errors by independently implementing the same set of user requirements N times, where N could be 2, 3, 4, or more?

Acceptance programming

Risk management programming

N-version programming

Avoidance programming

N-version programming

When forced to choose between adding more user features and doing more testing, most software companies decide in favor of more testing. T/F

False

The safety engineer uses a logging and monitoring system to track which of the following?

standards

objectives

hazards

deliverables

hazards

A complex system used in IT is a redundant array of independent disks (RAID), which is commonly used in which type of file servers?

high-volume data storage

low-volume data storage

unpredictable-volume data storage

irregular-volume data storage

high-volume data storage

When sued for which of the following, a software supplier is not held responsible for every product defect that causes customer or third-party loss?

breach of warranty

misrepresentation

strict liability

negligence

negligence

Software quality is defined as the degree to which a software product meets:

the needs of its users.

the standards of its competitors.

sustainability and environmental protection needs.

the minimum financial return standards.

the needs of its users.