UPDATED CNIT 182 - Exam 2

Activity Diagram

A diagram that resembles a horizontal flowchart that shows the actions and events as they occur. Show the order in which actions take place and identify the outcome.

Actor

An external entity with a specific role. In a use case model, they are used to model interaction with the system.

Attribute

A single characteristic or fact about an entity. Otherwise called a field, it is the smallest piece of data that has meaning within an information system. For example, a Social Security number or company name could be examples of this. In O-O analysis, this is part of a class diagram that describes the characteristics of objects in the class. Also known as a data element.

Black Box

A metaphor for a process or an action that produces results in a non-transparent or non-observable manner. In data flow diagrams, a process appears as this, where the inputs, outputs, and general function of the process are known, but the underlying details are not shown.

Cardinality

A concept that describes how instances of one entity relate to instances of another entity. Described in entity-relationship diagrams by notation that indicates combinations that include zero or one-to-many, one-to-one, and many-to-many.

Child

In inheritance, it is the object that derives one or more attributes from another object, called the parent.

Class

A term used in object-oriented modeling to indicate a collection of similar objects.

Class Diagram

A detailed view of a single use case, showing the classes that participate in the use case, and documenting the relationship among the classes.

Encapsulation

The idea that all data and methods are self-contained, as in a black box.

Focus

In a sequence diagram, it indicates when an object sends or receives a message. It is indicated by a narrow vertical rectangle that covers the lifeline.

Inheritance

A type of object relationship. It enables an object to derive one or more of its attributes from another object (e.g., an INSTRUCTOR object may inherit many traits from the EMPLOYEE object, such as hire date).

Instance

A specific member of a class.

Lifeline

In a sequence diagram, this is used to represent the time during which the object above it is able to interact with the other objects in the use case. An X marks the end of this.

Message

An O-O command that tells an object to perform a certain method.

Method

Defines specific tasks that an object must perform. Describes what and how an object does something.

Object

Representsa real person, place, event, or transaction.

Object Model

Describes objects, which combine data and processes. These are the end product of O-O analysis.

Object-Oriented (O-O) Analysis

Describes an information system by identifying things called objects. An object represents a real person, place, event, or transaction. This is a popular approach that sees a system from the viewpoint of the objects themselves as they function and interact with the system.

Parent

In inheritance, this is the object from which the other object, the child, derives one or more attributes.

Polymorphism

The concept that a message gives different meanings to different objects (e.g., a GOOD NIGHT message might produce different results depending if it is received by a child or the family dog).

Relationship

Enable objects to communicate and interact as they perform the business functions and transactions required by a system. These describe what objects need to know about each other, how objects respond to changes in other objects, and the effects of membership in classes, superclasses, and subclasses.

Sequence Diagram

A diagram that shows the timing of transactions between objects as they occur.

State

An adjective that describes an object's current status (e.g., a student could be a CURRENT, FUTURE, or PAST student).

State Transition Diagram

Shows how an object changes from one state to another, depending on the events that affect the object.

Subclass

A further division of objects in a class. These are more specific categories within a class.

Superclass

A more generalized category to which objects may belong (e.g., a NOVEL class might belong to a ___ called BOOK).

System Boundary

Shows what is included and excluded from a system. Depicted by a shaded rectangle in use case diagrams.

Unified Modeling Language (UML)

A widely used method of visualizing and documenting software systems design. This uses O-O design concepts, but it is independent of any specific programming language and can be used to describe business processes and requirements generally.

Use Case

Represents the steps in a specific business function or process in UML.

Use Case Description

A description in UML that documents the name of the use case, the actor, a description of the use case, a step-by-step list of the tasks required for successful completion, and other key descriptions and assumptions.

Use Case Diagram

A visual representation that illustrates the interaction between users and the information system in UML.

Acceptance

One of four risk control strategies. In ___, the risk is accepted and nothing is done. Risk is usually accepted only if protection from risk is clearly not worth the expense.

Adaptive Maintenance

Adds new capability and enhancements to an existing system.

Administrator Account

An account that allows essentially unrestricted access to the application.

Allocated Baseline

Documents the system at the end ofthe design phase and identifies any changes since the functional baseline. This includes testing and verification of all system requirements and features.

Applications programmer

A person who works on new systems development and maintenance.

Archived

The storage of previous version of a system when a new version is installed.

Asset

Hardware, software, data, networks, people, or procedures that provide tangible or intangible benefit to an organization.

Attack

A hostile act that targets an information system, or an organization itself.

Automatic Update Service

Enables an application to contact the vendor's server and check for a needed patch.

Availability

One of the three main elements of system security (CIA). Availability ensures that authorized users have timely and reliable access to necessary information.

Avoidance

One of four risk control strategies. In ___, adding protective safeguards eliminates the risk.

Backup

The process of saving a series of file or data copies to be retained for a specified period of time. Data can be ___ continuously, or at prescribed intervals.

Backup Media

Data storage options, including tape, hard drives, optical storage, and online storage.

Backup Policy

Detailed instructions and procedures for all backups.

Bandwidth

The amount of data that the system can handle in a fixed time period. ___ requirements are expressed in bits per second (bps).

Baseline

A formal reference point that measures system characteristics at a specific time. Systems analysts use these as yardsticks to document features and performance during the systems development process.

Benchmark testing

A form of testing used by companies to measure system performance.

Biometric Scanning Systems

Mapping an individual's facial features, handprint, or eye characteristics for identification purposes.

BIOS-level Password

A password that must be entered before the computer can be started. It prevents an unauthorized person from booting a computer by using a secondary device. Also called a power-on password or a boot-level password.

boot-level password

A password that must be entered before the computer can be started. It prevents an unauthorized person from booting a computer by using a secondary device. Also called a power-on password or a boot-level password. Same As BIOS-level Password (NOT BIOS-LEVEL PASSWORD, OR POWER-ON (I couldn't think of anything else to put as this term))

Business Continuity Plan (BCP)

A plan that defines how critical business functions can continue in the event of a major disruption.

Capacity Planning

A process that monitors current activity and performance levels, anticipates future activity, and forecasts the resources needed to provide desired levels of service.

Certification

A credential an individual earns by demonstrating a certain level of knowledge and skill on a standardized test.

Chance Control (CC)

A process for controlling changes in system requirements during software development; also an important tool for managing system changes and costs after a system becomes operational.

CIA Triangle

The three main elements of system security: confidentiality, integrity, and availability.

Confidentiality

One of the three main elements of system security(CIA); ___ protects information from unauthorized discloser and safeguards privacy.

Configuration Management (CM)

A process for controlling changes in system requirements during the development phases of the SDLC. ___ also is an important tool for managing system changes and costs after a system becomes operational.

Continuous Backup

A real-time streaming backup method that records all system activity as it occurs.

Corrective Maintenance

Changes to the system to fix errors.

Credentials

Formal qualifications that include degrees, diplomas, or certificates granted by learning institutions to show that a certain level of education has been achieved.

Critical Risk

When risks are categorized and prioritized (those with the highest vulnerability and impact ratings) head the list

Critical Thinking Skills

The ability to compare, classify, evaluate, recognize patterns, analyze cause and effect, and apply logic. Such skills are valued in the IT industry.

Data Replication

In normal operating conditions, any transaction that occurs on the primary system must automatically propagate to the hot site.

Database Programmer

A person who focuses on creating and supporting large-scale database systems.

Denial of Service (DOS)

An online attack that occurs when an attacking computer makes repeated requests to a service or services running on certain ports.

Differential Backup

A backup that includes only the files that have changed since the last full backup.

Disaster Recovery Plan

A documented procedure consisting of an overall backup and recovery plan.

Distributed Denial Of Service (DDOS)

A service attack involving multiple attacking computers that can synchronize DOS attacks on a server

Dumpster Diving

Raiding desks or trash bins for valuable information.

Encryption

A process where data is coded (converted into unreadable characters) so that only those with the required authorization can access the data (usually via decoding software).

Enhancement

A new feature or capability.

Exploit

An attack that takes advantage of a system vulnerability, often due to a combination of one or more improperly configured services.

Fault Management

The timely detection and resolution of operational problems. ___ includes monitoring a system for signs of trouble, logging all system failures, diagnosing the problem, and applying corrective action.

Fault Tolerant

A system or application is said to be ___ if the failure of one component does not disable the rest of the system or application.

Firewall

The main line of defense between a local network, or intranet, and the Internet.

Full Backup

A complete backup of every file on the system.

Functional Baseline

The configuration of the system documented at the beginning of the project. It consists of all the necessary system requirements and design constraints.

Gigabits Per Second (Gbps)

A bandwidth or throughput measurement.

Hardening

Making a system more secure by removing unnecessary accounts, services, and features.

Help Desk

A centralized resource staffed by IT professionals that provides users with the support they need to do their jobs. A ___ has three main objectives: to show people how to use system resources more effectively, to provide answers to technical or operational questions, and to make users more productive by teaching them how to meet their own information needs. Also called service desk or information center.

Hot Site

A separate IT location, which might be in another state or even another country, that can support critical business systems in the event of a power outage, system crash, or physical catastrophe.

Identity Management

Controls and procedures necessary to identify legitimate users and system components.

Identity Theft

The stealing of personally identifying information online.

IEEE 802.11i

A security standard for Wi-Fi wireless networks that uses the WPA2 protocol, currently the most secure encryption method for Wi-Fi networks.

Incremental Backup

Saving a copy of only the files that have changed since the last full backup.

Integrity

One of the three main elements of system security(CIA); ___ prevents unauthorized users from creating, modifying, or deleting information.

Kbps (Kilobits per second)

A bandwidth or throughput measurement (Kilo).

Keystroke Logger

A device that can be inserted between a keyboard and a computer to record keystrokes.

Log

Record typically kept by operating systems and applications that documents all events, including dates, times, and other specific information. They can be important in understanding past attacks and preventing future intrusions.

Maintenance Activities

Changing programs, procedures, or documentation to ensure correct system performance. Adapting the system to changing requirements, and making the system operate more efficiently. Those needs are met by corrective, adaptive, perfective, and preventive maintenance.

Maintenance Expenses

Costs that vary significantly during the system's operational life and include spending to support maintenance activities.

Maintenance Release

A formal release of a new system version that contains a number of changes.

Maintenance Release Methodology

A system of numbered releases used by organizations (especially software vendors) that helps organize maintenance changes and updates.

Maintenance Team

One or more systems analysts and programmers working on product maintenance issues together.

Malware

Malicious software that might jeopardize the system's security or privaсy.

Megabits per second (Mbps)

A bandwidth or throughput measurement (Mega).

Metrics

Workload measurements, also called ___, include the number of lines printed, the number of records accessed, and the number of transactions processed in a given time period.

Mitigation

One of four risk control strategies. ___ reduces the impact of a risk by careful planning and preparation. For example, a company can prepare a disaster recovery plan to mitigate the effects of a natural disaster should one occur.

Network

Two or more devices that are connected for the purpose of sending, receiving, and sharing data.