MIS 303 Exam 2 Comprehensive Study Guide
Exam 2 Overview and Format
Exam 2 Components and Point Allocation - Part 1: Multiple Choice Questions (MCQ): Total of questions worth points each, totaling points. - Part 2: True or False (T/F): Total of questions worth points each, totaling points. - Part 3: Short Answer Questions: Worth a total of points. - Total Points: .
Testing Conditions - The exam is strictly closed-book and closed-notes. - All study materials, devices, and notes must be put away. - The exam will be administered in class. - Duration: minutes.
Chapter 6: The Cloud and Network Technology
Definition of the Cloud - The cloud is the elastic leasing of pooled computer resources over the Internet.
Rationale for Cloud Adoption (Why Cloud?) - Lower Costs: Driven by cheap processors and essentially free data communication and storage. - Ubiquitous Access: Data and applications are accessible from anywhere with an internet connection. - Improved Scalability: Ability to handle increasing workloads. - Elasticity: The capacity to automatically adjust resources (up or down) to match demand dynamically. - Virtualization Technology: Allows for the creation of simulated environments or dedicated resources from a single physical hardware system. - Internet-based Standards: Enable flexible and standardized processing capabilities across different systems.
Cloud vs. In-House Hosting Comparison - Capital Investment - Cloud: Small capital requirements with a known, predictable cost structure. - In-House: Significant upfront capital required with high cost uncertainties. - Development Speed - Cloud: Speedy development and deployment. - In-House: Slower implementation due to procurement, installation, and configuration of physical hardware. - Control Over Data - Cloud: Loss of control over the physical location of data. - In-House: Full control of data location but requires significant development and maintenance effort. - Scalability - Cloud: Superior scalability to handle growing or fluctuating demand. - In-House: Difficult and expensive to accommodate fluctuating or peak demand. - Security & Disaster Preparedness - Cloud: Often provides "best-of-breed" security and disaster recovery capabilities due to specialized expertise. - In-House: Offers in-depth visibility into security protocols but requires significant internal expertise. - Obsolescence - Cloud: No risk of hardware obsolescence for the user. - In-House: Constant risk of hardware becoming outdated. - Costs - Cloud: Cheaper due to industry-wide economies of scale. - In-House: High annual maintenance and ongoing support costs. - Management Focus - Cloud: Allows organizations to focus on core business goals rather than IT infrastructure. - In-House: Requires staffing, training, and increased management of IT personnel.
When the Cloud Does Not Make Sense - Cloud hosting is inappropriate when laws or standard industry practices require physical control or possession of data. - Example: Financial institutions are often legally mandated to maintain physical control over their sensitive data.
Three Fundamental Cloud Types - Software as a Service (SaaS) - Concept: Renting software rather than building or buying it. - User Focus: Focus on being a user; scaling at will; pay-per-use. - Target Users: Employees and customers. - Examples: Salesforce.com, iCloud, Office 365. - Platform as a Service (PaaS) - Concept: Assembling software components at will onto a provided platform. - Target Users: Application developers and application testers. - Examples: Google App Engine, Microsoft Azure, AWS Elastic Beanstalk. - Infrastructure as a Service (IaaS) - Concept: Cost-effective and rapid scaling of fundamental infrastructure (servers, storage). - Target Users: Network architects and systems administrators. - Examples: Amazon EC2 (Elastic Compute Cloud), Amazon S3 (Simple Storage Service).
Content Delivery Network (CDN) - Definition: A specialized type of PaaS (often considered its own category) that stores user data in many different geographical locations and makes data available on demand. - Primary Goal: Minimizes latency by serving data from the location closest to the user. - Content Type: Typically used for storing and delivering content that seldom changes. - Benefits: - Decreased (and sometimes guaranteed) load times. - Reduced load on the origin server. - Increased reliability and availability. - Protection from Denial-of-Service (DoS) attacks. - Reduced delivery costs for mobile users through localized data. - Pay-as-you-go pricing models.
Network Technology and Types - Personal Area Network (PAN): Devices connected around a single person. - Local Area Network (LAN): Computers connected at a single physical site. - Wide Area Network (WAN): Computers connected between two or more separated sites. - The Internet and Internets: Networks consisting of other networks.
Net Neutrality Principle - Core Concept: All data on the internet should be treated equally. - Carriers should not be allowed to: - Decide which sites load quickly. - Decide which apps are allowed on a network. - Decide which content is acceptable. - Usage Problem: Some services use significantly more bandwidth. For example, Netflix accounts for more than of all Internet traffic in North America between and .
How the Internet Works - Domain Name System (DNS): A system that provides a unique name affiliated with a public IP address. It allows for a dynamic affiliation between domain names and IP addresses, including multiple names for the same address. - Uniform Resource Locator (URL): An internet address that includes the protocol, such as or . - Public IP Addresses: Uniquely identify a device on the global Internet. These are assigned by ICANN (Internet Corporation for Assigned Names and Numbers). - Private IP Addresses: Identify a device on a private network (usually a LAN). These are controlled locally by the LAN.
Three-Tier Architecture - Used by almost all e-commerce applications. - User Tier: Computers, phones, and devices using browsers to request and process Web pages. - Server Tier: Computers running Web servers and application programs. - Database Tier: Computers running a Database Management System (DBMS) that processes SQL requests to retrieve and store data.
Service-Oriented Architecture (SOA) Principles - Designed to create flexible, reusable, and maintainable systems by structuring applications as independent services. - Example Services:
ObtainPartData,ObtainPartImages,ObtainPartQuantityOnHand, andOrderPart. - Mechanism: JavaScript is typically written to invoke these services correctly to build complex functionality.Risks and Future of the Cloud - Technology Concerns: Reliability and security require finding reputable providers, using VPNs, encryption, and thorough integration planning (data synchronization, authentication). - Business/Management Concerns: Controllability (regulation compliance, vendor lock-in) and data ownership. - Private Cloud: A cloud owned and operated by an organization for its own benefit, located within its private infrastructure. - Future Trends: - Startups: Greater access to enterprise-grade tools for low costs. - AI Acceleration: Cloud platforms will be used to train and scale AI tools as services. - Hybrid/Multicloud: Using combinations of private and public clouds (AWS, Azure, Google Cloud) for different purposes. - Remote Action Systems: Telemedicine (remote diagnosis) and Telelaw enforcement (e.g., RedFlex using cameras for automated ticketing).
Chapter 7: Collaboration Information Systems
Defining Collaboration - Collaboration: A group of people working together to achieve a common goal via feedback and iteration. - Cooperation: Occurs when people divide a project into separate tasks and work independently without consultation. It lacks the feedback and iteration loop essential to collaboration.
Success Criteria for Teams - Successful Outcome: Meeting the project goals. - Growth in Team Capability: Improving the team's ability to work together in the future. - Meaningful and Satisfying Experience: Ensuring the work is rewarding for the participants.
Primary Purposes of Collaboration - Becoming Informed: Sharing data and communally documenting shared understandings. - Making Decisions: These can be Operational, Managerial, or Strategic. Decisions range from Structured (clear process defined) to Unstructured (process not clearly defined). - Solving Problems: Developing a shared definition of the problem through discussion and compromise. - Managing Projects: Moving through the four project phases.
Four Phases of Project Management - Starting Phase - Tasks: Set team authority, scope, and initial budget; form the team and establish roles/responsibilities; set team rules. - Shared Data: Member personal data and startup documents. - Planning Phase - Tasks: Determine tasks and dependencies; assign tasks; set the schedule; revise the budget. - Shared Data: Project plan, budget, and related documents. - Doing Phase - Tasks: Perform tasks; manage time and budget; solve emergent problems; document and report progress; reschedule tasks as necessary. - Shared Data: Updated tasks, project schedules, and status documents. - Finalizing Phase - Tasks: Determine completion; prepare archival documents; disband the team. - Shared Data: Archival documents.
Collaboration IS Components and Requirements - Hardware: Computers, mobile devices. - Software: Email, text messaging, collaborative tools (Microsoft Teams, etc.). - Data: Google Drive, OneDrive; involves both project data (the work) and metadata (schedules, task lists). - Procedures: Guidelines for using the software (e.g., Microsoft Office Online). - People: Knowing when and how to use the tools effectively.
Communication Tools - Synchronous: Useful for immediate interaction (e.g., live meetings). - Asynchronous: Useful when participants need flexibility (e.g., email, discussion boards).
Chapter 8: Social Media Information Systems (SMIS)
Definitions - Social Media (SM): IT for sharing content among networks of users; enables "communities of practice" (people related by a common interest). - SMIS: An information system that supports the sharing of content among networks of users.
Three SMIS Roles - Social Media Providers: Platforms like Facebook, X (Twitter), Instagram, TikTok, LinkedIn. They may charge fees for advertising or professional pages. Large organizations can act as their own providers (internal blogs/wikis). - Users: Individuals and organizations. - Communities: Groups based on mutual interests that transcend geographic or familial boundaries.
Community Tiers - First-tier: Users with a direct relationship to the site. - Second-tier and higher: Users connected through a first-tier user. Growth in these tiers is exponential, providing both viral potential (blessing) and rapid spread of negative info (curse).
SMIS and the Five Components - Hardware: Cloud-based servers (providers) and user computing devices (users). - Software: Application and NoSQL/Analytics DBMS (providers); browsers and mobile apps (users). - Data: Content and connection data (providers); user-generated content and connection data (users). - Procedures: Maintenance (providers); informal but adaptive content creation/management (users). - People: Specialized staff (providers); adaptive or sometimes irrational key users (users).
Social Media in the Value Chain - Sales and Marketing: Focus on Social CRM and peer-to-peer sales. Risk: Loss of credibility or bad PR. - Customer Service: Focus on peer-to-peer support. Risk: Loss of control. - Inbound/Outbound Logistics: Focus on problem-solving in the supply chain. Risk: Privacy concerns. - Manufacturing/Operations: Focus on user-guided design and operational efficiency. Risk: Efficiency/effectiveness errors. - Human Resources: Focus on employee prospecting, recruiting, and internal communication (e.g., SharePoint). Risk: Error or loss of credibility.
Social Capital - Types of Capital: Physical (factories), Human (knowledge), and Social (relationships). - Value of Social Capital: Defined as (Number of Relationships) (Relationship Strength) (Entity Resources). - Ways SM Adds Value: - Information: Providing data on opportunities/problems. - Influence: Influencing critical decision-makers. - Social Credentials: Providing a professional image. - Personal Reinforcement: Reinforcing position within an industry.
Enterprise Social Networks (ESN) - Definition: Software platforms used within an organization to facilitate cooperative work (Enterprise ). - Best Practices: Define goals and success metrics; identify executive sponsors and champions; provide training and incentives; continuously evaluate effectiveness.
Internal Risks of Social Media - Information Security: Leaking sensitive data (e.g., birth dates for identity theft). - Corporate Liability: Leaking confidential info or creating sexual harassment liabilities. - Employee Productivity: Reduced output due to non-work-related site visitation.
Chapter 9: Business Processes and Enterprise Systems
Basic Process Types - Structured Processes: Formally defined, standardized, involve day-to-day operations (e.g., payroll, customer returns). Changes slowly. - Dynamic Processes: Flexible, informal, adaptive, involve strategic decisions (e.g., collaboration, social networking). Changes rapidly.
Information Systems by Scope - Workgroup: Supports users; localized problem solving; data can be duplicated; somewhat difficult to change (e.g., doctor’s office). - Enterprise: Supports users; formalized procedures; eliminates workgroup data duplication; difficult to change (e.g., hospital). - Inter-enterprise: Supports users; resolves duplicated enterprise data; very difficult to change (e.g., healthcare exchange).
Process Quality Dimensions - Process Efficiency: Measure of the ratio of process outputs to inputs. - Process Effectiveness: Measure of how well a process achieves organizational strategy. - Improvement Methods: Change process structure (automation), change resources (data quality control), or change both.
Information Silos - Definition: Occurs when data are isolated in separated information systems. - Problems: Data duplication, inconsistency, isolation, disjointed processes, lack of integrated information, and increased costs. - Solutions: Integrate data into a single database, revise processes, or use Enterprise systems (CRM, ERP, EAI).
Business Process Reengineering (BPR) - The activity of altering existing processes and designing new ones to take advantage of new IS. - Characteristics: Difficult, slow, and exceedingly expensive; requires high-level skills.
Categories of Enterprise Applications - Customer Relationship Management (CRM): Manages customer life cycle phases (Marketing, Acquisition, Relationship Management, Loss/Churn). - Enterprise Resource Planning (ERP): A suite of applications (modules) and a database for consolidating operations (Supply Chain, Manufacturing, HR, Accounting) into a single platform for real-time updates. - Leading Provider: SAP. - Vulnerabilities: Misconfigured access control, insecure custom code, unprotected data, and poor password management. - Enterprise Application Integration (EAI): A software suite that provides layers to connect existing "silo" applications without replacing them. It enables a gradual move toward full ERP.
Implementation Challenges - Collaborative management requirements, requirements gaps, transition problems, and employee resistance. - Note: "Most IT problems are workflow problems, not software problems."
Chapter 10: Information Security
Major Elements of IS Security - Threat: Person or organization seeking data illegally. - Vulnerability: Opportunity for a threat to gain access. - Safeguard: Measure taken to block a threat (not always effective). - Target: The asset desired by the threat.
Security Problem Sources - Human Error: Procedural mistakes or accidents. - Computer Crime: Phishing, hacking, DoS attacks. - Natural Disasters: Property loss and service interruption.
Types of Security Loss - Unauthorized Data Disclosure: - Pretexting: Deceiving by pretending to be someone else. - Phishing: Obtaining data via pretexting in email (Email Spoofing). - Spoofing: Pretending to be someone else (e.g., IP spoofing). - Sniffing: Intercepting network traffic. Wardrivers search for unprotected wireless networks. - Hacking: Breaking into computers/networks to steal data. - Incorrect Data Modification: Procedural errors or system errors. - Faulty Service: Development errors or Usurpation (service improperly restored). - Denial of Service (DoS): Flooding a system to prevent legitimate use. - Loss of Infrastructure: Theft or terrorist activity.
The Goal of IS Security - Find the appropriate trade-off between the risk of loss and the cost of implementing safeguards.
Personal Security Safeguards - Use strong, multiple passwords. - Use at reputable vendors. - Clear browsing history and cookies (e.g., CCleaner). - Use an Intrusion Detection System (IDS) to sense access attempts. - Install and update antivirus software regularlly.
Incident Response - Every organization must have an incident-response plan. - Components: Centralized reporting, specific responses for different threats, speed of action, and identified critical personnel with off-hours contact info.
Questions & Discussion
Q: Identify a characteristic that is a disadvantage of cloud-based hosting. - A: Loss of control over data location.
Q: Which of the following is an example of PaaS? - A: Microsoft Azure.
Q: The cloud is defined as the elastic leasing of pooled computer resources over the Internet. - A: True.
Q: Cloud-based hosting is the ideal choice for organizations required by law to have physical control over data. - A: False.
Q: Which of the following happens during the doing phase of project management? - A: Reschedule tasks as necessary.
Q: All are criteria for team success except: non-meaningful experience. - A: Correct.
Q: Collaboration IS do not specify standards and techniques for conducting the team's work. - A: False.
Q: List four primary purposes of collaboration. - A: Become informed, make decisions, solve problems, and manage projects.
Q: SmartToy increases market share fivefold using Watson AI. This is an example of? - A: Effectiveness (achieving organizational strategy).
Q: Workgroups developing their own IS leads to information silos. - A: True.
Q: Hardware component for SMIS provides… - A: Elastic, cloud-based servers.
Q: Business literature defines four types of capital. - A: True (Physical, Human, Social, and likely Financial, though transcript focuses on the first three).
Q: A computer crime is committed if an employee inadvertently installs an old database on top of the current one. - A: False (This is human error, not necessarily a crime unless intentional).