INFO SYSTEMS EXAM UIOWA

Multi-Processing (Parallel Processing)

A large problem can often be divided into smaller ones, Which then all the components of the large problem can be solved all at the same time

Info Systems Components

On-Premise

IT infrastructure hardware and software apps that are hosted on site

Cloud Computing Con

"Pay as you go" model can lead to unexpected operating expenses if administrators are not familiarized w/ cloud-pricing models.

SaaS

Software as a Service

accessible via web browser - priced on pay-per-use or subscription

Google docs, gmail, salesforce

PaaS

Platform as a Service

Development and deployment environment

Force.com App Engine Azure

IaaS

Infrastructure as a Service

Servers, storage, networking

Go Grid AWS

SPIaaS model overview image

Cloud Types

Private (single Tenant

Hybrid

Public (Multi-Tenant)

VPN

Virtual Private network

think sending a post card via the internet vs a letter in a lock box where only the sender and the receiver have the key to the lockbox so no one else can read your letter

Server

a computer that stores and manages information; shares info with devices whenever it is asked (Like going to the library and asking for a book, and the librarian gets you (serves) the book

IP

Internet Protocol (Address)

Unique Digital address/ID assigned to every device connected to the internet

Evolution 1st tier

Keep doors open

Evolution 2nd tier

know the past and current operations

Evolution 3rd tier

combine internal/external data to provide insight to future options/probabilities and help set strategy

Gartner Analytic Contimuum

Descriptive analytics

what happened | Current number of employees

Diagnostic analytics

why did it happen | What is the relationship between attrition and current head count

Predictive analytics

what will happen | If we have more products, how many employees will we need

Prescriptive analytics

what should we do | Where should we place these new employees

Why is collecting data important?

Work smartly

Move forward w/ confidence

Develops trust for all parties

IS tools help esuring data captured is accurate

Infographic

Repping info in a graphical format so data is easily understandable at a glance

stacked column

shows a simple comparison between sets of numbers using stacked vertical columns showing a total

cluster column

Compare values across a few categories.

Treemap

visualizing large number of related categories

Good GUI

self-documenting

minimizes data collect errors

Enhances overall understanding

dashboard

"a picture is worth a thousand words"

A visual display of data used to monitor conditions

benchmarking

Comparing own data to top performers in other orgs or departments

graphicacy

The ability to understand and present info in non-textual formats

Sketches photos maps charts

Info security

Protecting info systems from unauthorized access, disruption, or destruction

Confidentiality (Info security)

Keeping data private

Integrity (Info security)

making sure data isn't altered

Availability (Info security)

ensuring systems and data are accessible when needed

IT Risk

Potential for loss or damage to IT systems/data

Operational (IT Risk)

System failure, human error

Security (IT Risk)

Unauthorized acces/hacking

Compliance (IT Risk)

Violating laws or regulations

Reputational (IT Risk)

Data breach leading to loss of trust

NIST

National Institute of Standards and Technology

Promotes US economy and public welfare by providing tech leadership for the nations measurement and standards infrastructure

Annual Risk Assessment

Continuous review and improvement

Administrative

Physical

Technical

Natural threats

floods. tornadoes

unintentional threats

employee mistakenly leaking info

Intentional threats

spyware, malware, adware companies

Vunlerability

known weaknesses that can be exploited by attackers

How to prevent vulnerability

identify weak points, develop a strategy for quick response

Red team

attacks/hacks the infrastructure

blue team

defends against attacks

email phishing

When a you receive an email or text from a fraudulent source disguised as a legitimate business - that is designed to hack your computer and gain financial or identity information from you

spot the phish.

spear phishing/smishing

malicious emails sent to one specific person.

They have your name, title, job and are trying to make you scared.

Angler Phishing

tricking victim by way of using info the victim has posted on social media

APTs

Advanced Persistent Threats

Sophisticated, long-term cyber attacks targeting specific organizations.

IoT

(Internet of Things) refers to a network of physical objects of things that are embedded with electronics, sensors, software, and network creativity. These physical objects can exchange data with each other

Denial of Service (DoS) Attack

An attack that occurs when legitimate users are denied access to a computer system because a hacker is repeatedly making requests of that computer system that tie up its resources and deny legitimate users access.

how do cybercriminals use AI

automate attacks, evade detection, bypass traditional security measures

Insider threats

Malicious actions by individuals within an org

Data Breach

Info is accessed and extracted w/ out authorization

Data Leak

Data located where it is not supposed to be

characteristics of high quality data

Accurate - no wrong values

Complete - no missing values

Consistent - everything adds up

Timely - data updated often

Unique - is each event represented once

Data Governance

refers to the overall management of the availability, usability, integrity, and security of company data

Like 3 branches of Gov.

MDM Master Data Management

Who, What, Where

Prototyping

the process of building a model that demonstrates the features of a proposed product, service, or system

Graphical User Interface

Methods of User-Centered design are used to ensure that visual language introduced in design is well tailored to tasks

Goal is to enhance efficiency and usability

characteristics of good GUI (Graphical User Interface)

self documenting

Clean data

Minimal clicking

characteristics of good GUI continued

Aesthetically pleasing

Compatibility - users, tasks

Comprehensive - easy to understand

Consistency - should always act the same

Control and Directiveness - actions should result from explicit user requests

Efficiency

Simple

Forgiveness - resilient to human error

Databases

Systematic collection of data

Supports electronic storage/manipulation of data

Eases data management

Types of database models

NoSQL

Not Only SQL

used for semi-structured or unstructured data

Large amounts of raw data

OODB

Object-orientated databases

Storage of all data types

Stored in the form of objects

Each object contains both data (attributes or fields) and the methods (functions) that can operate on that data

What is SQL?

Structured Query Language

Commands to access and manipulate databases

It queries to INSERT, DELETE, UPDATE, SEARCH, ALTER, and more

data warehouse diagram

Data Lake

Not exclusive at all

a central repository for large amounts of raw unstructured data or structured data

Data Mesh

Decentralization and distribution of data ownership, bot at a technical and organizational level

ETL

Extract Transform Load

Extract

Transform

Common SQL Commands

SELECT Statement

SQL command to retrieve data from a database.

SELECT column1, column2,...

FROM table_name

Or to select all columns

SELECT*FROM table_name

WHERE Clause

used to filter records

SELECT column1, column2,...

FROM table_name

WHERE condition;

operators in the WHERE Clause

AND

used with the WHERE clause

displays a record if all the conditions separated by AND are True

NOT

used with the WHERE clause

displays a record if the condition is not true

OR

used with the WHERE clause

displays a record if any of the conditions separated by OR are True

SQL ORDER BY

The ORDER BY keyword is used to sort the result-set in ascending or descending order.

ORDER BY

Sort the products by price:

SELECT column1, column2,...

* FROM Products

ORDER BY Price;

SQL NULL values

NULL values represent missing unknown data.

Select by value/computed field

The SQL LIKE Operator (important)

LIKE examples

hello world in python

print ("Hello World")

Network protocols

rules that define how data is transmitted between devices on a network

How data travels

broken into packets ->

sent thru routers & switches ->

Reassembled at the destination

How devices connect

wired and wireless networks

Wired networks

devices using ethernet cables. stable, fast.

Wireless

Wi-Fi or bluetooth.

Convenient but interference

LAN

WIRED

Local Area Network

connects devices that are already close. same home/building

ethernet or wifi

MAN

WIRED

Metropolitan Area Network

spanning a city

fiber optics

WAN

WIRED

Wide Area Network

Stretches across a large geographical area

public networks/internet

PAN

WIRELESS

Personal Area Networks

Provides communication for devices owned by a single user that work over a short distance

Wireless headphones 30 ft

WLAN

WIRELESS

Wireless Local Area Networks (Wi-Fi)

High frequency radio waves w/ access point to internet

1 km

WWAN

WIRELESS

Wireless Wide Area Networks

2 techs - cellular and satellite communication systems