Task 1: Multiple Choice (25%)

Size: px

Start display at page:

Download "Task 1: Multiple Choice (25%)"

Shauna Bates
6 years ago
Views:

1 1 All subparts give equally score. Document and justify any assumptions. Task 1: Multiple Choice (25%) Use the two attached answer forms for this task (keep one for yourself). You can get a new form from the invigilator if necessary. Only one answer is completely correct. For every question, a correct answer counts as 1 point. An incorrect answer or more than one answer counts as -0.5 points. A question left blank counts as 0 points. The lowest score is 0 point on this task. 1) What are included of the following statements in the definition of software? a) The executing software b) The executing software and all program code developed, including scripts c) All documents and written artefacts produced under the development process d) All alternatives are correct 2) Which principles apply for good design? a) High cohesion and loose coupling b) As much reuse of existing software as possible c) Use of an effective and efficient programming language and readable code d) Use of design patterns as much as possible 3) There are two main strategies/processes to develop software: a) Waterfall or incremental b) Plan-driven or agile c) Fast or slow d) Rational Unified Process or Scrum 4) Which phase in the software process takes normally most time and has the highest cost? a) Design and implementation b) Validation and verification c) Evolution d) Work with specifications 5) When developing a system, it is desirable to a) as much as possible have customer/user contact to ensure that the right system is developed b) Use either a plan-driven or agile process c) Develop as much as possible for reuse d) Optimize the code as much as possible to ensure high performance 6) What is the main difference between COTS and in-house developed components? a) Higher trust to quality of in-house developed components than for COTS b) Quality and quality assurance is better managed for in-house developed components c) Costs related to COTS are normally lower compared to in-house developed components d) Support and maintenance are cheaper for in-house developed components 7) Inspection of design documents can be used to validate requirements related to... a) System performance b) Dependability c) Code standards d) All are correct

2 2 8) When is it normally desirable to use incremental delivery of the software? a) When the system has strong requirements to safety b) When the development team is distributed c) When it is expected changes in the requirements d) All are correct 9) Test-driven development means... a) performing extreme programming (XP) b) developing tests when defects are identified c) developing tests before the code, thus the right code means that a test has been passed d) that the whole test regime is under development through the whole implementation period 10) The main purpose of the pre-study phase (phase 0) in the development of software is to a) Document user requirements for the system b) Design and implement the system c) Carry out a preparatory analysis of needs, enterprise and stakeholders d) Choose a development process and establish a project team 11) What does a unit test? a) Tests that different parts of the system works correctly together b) Tests that computer hardware itself works c) Tests individual parts of the software d) None of the alternatives are correct 12) Ethical guidelines within the software development profession : a) Are defined by the employer or client b) Are defined based on judgement of which software types to be developed c) Are defined by peers as a set of expectations and rules for conduct, quality and knowledge to a software engineer d) Is dependent of proper payment by the employer or client for accomplished work 13) What does best characterise the project framework Scrum? a) Stand-up meeting, sprint backlog, Scrum-team and product owner b) Defined ceremonies, artefacts and roles c) Fast deliveries and many customer meetings d) Par-programming, test-first and continuous integration 14) Which factors affect most to a lower price to a customer, when a higher cost estimate is assumed? a) Number of components that can be reused b) Market opportunities and code ownership c) Well-defined requirements and technology d) Documented high employee/team productivity 15) Risk management includes? a) Identification, planning, analysis, monitoring and handling of different types of risks b) That projects are stopped when it is a high probability and consequence of given events c) That projects will be delayed because much bureaucracy and administration d) All are correct 16) Which software property is most influenced by OWASP TOP-10? a) Usability b) Dependability c) Performance d) Reuse opportunity

3 3 17) What is FURPS in connection to requirements (RE)? a) Findability, updateability, reconcilability, programmability, specification b) Functionality, usability, reliability, performance, supportability c) Functionality, understandability, reliability, possibility, standardisation d) FUture Requirement Process System 18) What is the main advantage of the client/server architectural pattern? a) Servers can be distributed across a network b) Performance is normally better c) Higher resilience against errors d) Distribution of services and better client traceability 19) What is the main advantage with standards within software development? a) Makes it possible that older, «legacy» software still can be used b) Makes it possible to implement in any programming language c) Makes it possible with faster shifts in technology d) Makes reuse of competence and understanding possible across systems and companies 20) DIFI has defined seven architectural principles. Six of these are service-orientation, interoperability, security, openness, flexibility and scalability. What is the seventh?? a) Testability b) Reliability c) Accessibility d) Reusability

4 4

5 5 DRAFT Answer form: Task 1 Taskno A B C D

6 6

7 7 HAND-IN Answer form: Task 1 Taskno A B C D

8 8 Task 2 Software development (30%) Privacy within digital processing and information technology is a theme that is important for many people. Many businesses and organisations have ICT-solutions that collectively contain very detailed information related to individuals. Personal information in an ICT-solution is often copied from other ICT-solutions and a lot of the information stored in the different solution is or should be the same. Some of the information may be sensitive and/or can be (mis)used to other purposes than it was originally given permission to (from government or the person herself).this leads to a set of issues: It is not any clear authoritative source to personal information. ICT-solutions may after a while contain partly incompatible and out-dated information. Maintenance and storage of personal information happens in many systems and requires potentially a lot of resources from the companies working hours, equipment, software and energy to keep the information updated and consistent. Sensitive information is exposed to people that should not have or do not need it in their jobs. It is difficult for individuals to delete information when desired. Outsourcing makes it hard to keep consistent records of who have access to the information. From a privacy perspective, it is desired that: Every individual should know which information that is recorded and by who. Ownership to some of the information has the individual, and it should be possible for individuals to restrict or prevent access to such information if there is no defined need for it. Individuals should have trust to systems that contain information and transactions related to them. The information should be stored in such a way that it is not possible to misuse it or use without a clear and legal purpose. Systems that use and store information about individuals need consent from the individual. Maintenance, quality and security related to personal information are ensured through the use of thrust-worthy sources to this type of information. The company IdMegler has been engaged by the Norwegian government to develop an ICT-solution with the aim to make a broker- and inspection service for use of personal information. IdMegler is established as an independent actor finances by the Norwegian government with the responsibility to implement and operate the service. The solution shall Make a physical and electronic barrier possible between information about a person, and transactions/dynamic information related to that person (e.g. health records, bank records, student results, etc.). o Information that can directly identify an individual (name, national identity number, etc.) should be separated in such a way that the information cannot be directly used to find transactions about the person in other ICT-solutions. o A common digital person record system (National registration office/folkeregisteret in Norway) shall be used as the only authoritative source for personal information. Folkeregisteret contains basic information about individuals (national identity number, name, gender, birthplace, country of birth, birth date, parents, children) and is authoritative

9 9 on the current and former home addresses. Folkeregistret offers a service that can only be used by IdMegler: PersonInformation getperson(national identity number) IdMegler is responsible to create, maintain and make accessible keys to be used by other ICTsolutions (student system, bank system, health information systems, etc.), and connect these to national identity number from Folkeregisteret. Companies and ICT-solutions thus need to register in IdMegler with information about the company that uses the service and which ICT-solution(s) that will use personal information. Companies or systems that are not members will not be able to use IdMegler. This is to ensure that it is a safe coupling between Folkeregisteret and the ICT-solution. All transactions related to an individual will be stored with keys made available through IdMegler, and IdMegler is used to couple/broke the information through key-brokering between the company and Folkeregisteret. All use of IdMegler is to be logged by IdMegler. o Inquiry of personal information is logged with hvem (company/case handler/ ipaddress/system/system process etc.), what, when and why an inquiry were made. It will be established an inspection service for individuals who can log in into IdMegler to get an overview of which companies and ICT-solutions that uses IdMegler and transactions related to these. Assumptions: All communication is encrypted. IdMegler makes, maintains and stores key-couplings between Folkeregisteret and enterprise systems. Individuals use IdPorten, BankID or MinID to log into IdMegler. IdMegler do not have direct access to information in Folkeregisteret nor to ICT-solutions that uses IdMegler. Connections between Folkeregisteret and the ICT-solution only happens when the ICT-solutions asks IdMegler to make a coupling between an identifier (either a national identity number or an earlier generated surrogate key) and information in Folkeregisteret. a) Define the most important functional requirements to IdMegler based on the description above. b) Describe the most important stakeholders/actors to IdMegler and how IdMegler can satisfy these. Make UML Use-case-diagram for IdMegler for every actor in the solution. c) Define the three most important non-functional quality/architectural requirements for IdMegler. d) Which architectural patterns should such a system use? Describe the three most important. e) Make a sketch of the architecture for IdMegler. Which main components and interfaces must the solution offer? Focus on the interfaces towards the actors (users, systems from Task 2a). Define the most important classes and make an UML Class diagram for IdMegler f) Define the most important services/methods for IdMegler. Describe these on the form <response> methodname (<parameters>)

10 10 Task 3: Testing (20%) Take IdMegler as a starting point. a) Describe the two most important usage scenarios for IdMegler. b) With the scenarios defined in Task 3a) as a starting point, specify the most important functions in the system to be tested. c) Define at least four Test Cases for Unit Testing for the method findperson(id) in one of the classes in IdMegler. Function Input Pre-condition Expected Output d) Describe how to develop tests to verify and validate that the solution satisfies requirements for dependability.

11 11 Task 4: Project management (25%) IdMegler is to be developed in a project and offered as a service from the company IdMegler AS. IdMegler AS is in the start-up phase and must thus establish a project team with hired student resources in addition to the internal resources Line (task load 80%), Pål (load 40%), Oskar (load 100%) and Helene (load 100%). The project is planned to be developed during 10 weeks before an integration test with respectively Folkeregisteret and two student systems at NTNU. All resources works a normal work week of 37,5 hours. Assume that there is no need for training before project start. You are hired as the project leader (PL) for the project. a) Define a course project plan for development of IdMegler. In the project plan, you must define main activities, milestones and dependencies. Make a sketch how the project eventually can be split into sub-projects. b) Identify risks that IdMegler AS has in the IdMegler-project. Estimate and substantiate probability and consequence of each risk. Describe strategies to reduce the two highest risks (highest probability and consequence). Which risks will increase with an increasing number of people in the project? c) For every activity in a), estimate the duration in days, effort (days of work), dependencies, and resource distribution. Every person can work in an activity a percentage of time. Call hired students S1, S2, S3, etc. Use the table on the next page. d) What is the total budget in hours for the project? How many students must be hired to deliver the solution in 10 weeks? Is it a realistic plan to deliver the solution in 10 weeks? Reason why or why not.

12 12

13 13 DRAFT Activity no. t0 t1 t2 t3 start (week) finish (week) duration (days) effort (day s work) dependencies resources Activity Project management 1 PL (100%) total (days) Budget

14 14

15 15 HAND-IN Activity no. t0 t1 t2 t3 start (week) finish (week) duration (days) effort (day s work) dependencies resources Activity Project management 1 PL (100%) total (days) Budget

MODULE Explain briefly the different types of system models that might be created during the system analysis phase. 2. Write short notes on

MODULE Explain briefly the different types of system models that might be created during the system analysis phase. 2. Write short notes on 15CS42: SOFTWARE ENGINEERING QUESTION BANK MODULE 1. 1. What is software? Explain the two fundamental types of software products. 2. What is software engineering? What is the difference between software