CITM-001 Certified Information Technology Manager (CITM) Questions and Answers

Organizations are linked extensively to increase their efficiency and effectiveness in achieving their goals. By reducing cycle times, organizations can deliver their products or services faster and more responsively to their customers. By improving accuracy, organizations can reduce errors, waste, and rework, and enhance their quality and reliability. These outcomes can also increase the capability of the organization to meet the changing needs and expectations of the market and the stakeholders. References: Sample Exam - GAQM, page 1, question 1; The Future of Flexibility at Work, paragraph 4.

Functional design is a design approach that focuses on the functionality and performance of a system, rather than its structure or appearance. Functional design usually begins with specifying the desired output, such as the goals, objectives, and requirements of the system, and then derives the input, processes, and data needed to achieve the output. Functional design can be applied to various types of systems, such as software, hardware, or business processes. Functional design is often contrasted with other design approaches, such as organizational design, object-oriented design, and structured design, which have different emphases and methods. References:

• System Analysis & Design - System Design1
• Process models in design and development2
• B. Engineering Design3

 Classes are a representation of some real-world thing and a number of specific instances of that thing. Classes define the common characteristics and behaviors of a group of objects, such as properties, methods, and events. Objects are individual instances of classes that can have different values for the properties and variables defined by the class. Procedures are blocks of code that perform a specific task or function. Links are connections between objects that allow communication and interaction. References: Objects and Classes – Programming Fundamentals, Objects and classes - Visual Basic, Object-Oriented Programming: Objects, Classes & Methods

A worm is a type of malicious code that can distribute itself without using having to attach to a host file. Unlike a virus, which needs to infect an existing program or file to spread, a worm can create copies of itself and send them to other devices through a network. A worm can consume network bandwidth, slow down the system performance, or deliver a payload that can damage or compromise the security of the infected device. According to the CITM study guide, a worm is “a self-replicating program that does not alter files but resides in active memory and duplicates itself” (p. 70). Some examples of worms are Stuxnet, Conficker, and Blaster. References:

• CITM Study Guide, Chapter 5: Information Security, pp. 69-71
• 12 Types of Malware + Examples That You Should Know1
• What is Malicious code?2
• Cyber Awareness Challenge 2022 Malicious Code3
• Malicious Code—What is it and How to Prevent it?4

 System analysis is the process of understanding problems and needs and arriving at solutions that meet them. It involves identifying, defining, and specifying the requirements of a system, as well as designing, developing, testing, and implementing the system. According to Wikipedia1, system analysis can be broken into five phases: scope definition, problem analysis, requirements analysis, logical design, and physical design. However, according to MasterStart2, there are seven stages of system development life cycle (SDLC), which include planning, requirements analysis, designing, development and testing, implementation, documentation, and evaluation. Therefore, depending on the perspective and the methodology, system analysis can involve three to seven stages, but the most common number is three: requirements analysis, logical design, and physical design. References: Wikipedia; MasterStart

 Sequential interdependence occurs when the output of one unit or group becomes the input for another. This type of interdependence requires coordination and communication among the units or groups involved, as any delay or error in one unit can affect the performance of the next unit. An example of sequential interdependence is an assembly line, where each stage of production depends on the previous one12 References:

• 1: 9.4 Intergroup Behavior and Performance - OpenStax
• 2: Three Types of Interdependence in an Organizational Structure | Small Business - Chron.com

Whatsup is an application software that allows users to send text messages, voice messages, make voice and video calls, and share images, documents, user locations, and other media. Whatsup is a cross-platform instant messaging subscription because it works on different operating systems such as Android, iOS, Windows Phone, and KaiOS, and it requires users to pay a yearly fee after the first year of use. Whatsup uses the user’s phone number as the primary identifier and encrypts all communication end-to-end. References: Whatsup - Wikipedia, Whatsup FAQ - About Whatsup, Whatsup FAQ - How to verify your number, Whatsup FAQ - How to access your messages and media.

Information derived from processing transaction reduces uncertainty about a firm’s order backlog or financial position because it provides a quantitative and forward-looking measure of demand. Order backlog is the amount of orders that a firm has received but not yet fulfilled. It reflects the expected future revenue and cash flows of the firm, as well as its ability to meet customer needs and expectations. Order backlog can also indicate the competitive position and market share of the firm, as well as its operational efficiency and capacity utilization. Therefore, disclosing order backlog can help stakeholders such as investors, analysts, managers, and regulators to assess the firm’s performance and prospects more accurately and reliably. References: Sample Exam - GAQM, page 4; Implications of Disclosing Order Backlog, page 1-2; Backlog Definition, Implications, and Real-World Examples - Investopedia

A logic bomb is a type of malicious code that is inserted into a software program and remains dormant until a specific condition or event occurs, such as a certain date, time, or user action. When the condition is met, the logic bomb activates and executes its harmful payload, which can range from deleting or corrupting data, to displaying unwanted messages, to crashing the system. Logic bombs are often used by disgruntled employees or hackers to sabotage an organization’s IT infrastructure or to extort money or information. Logic bombs are different from keyloggers, spam, and viruses, which are explained below:

• A keylogger is a software or hardware device that records every keystroke made by a user on a computer or mobile device, usually for the purpose of stealing passwords, personal information, or other sensitive data. Keyloggers can be installed by hackers through phishing, trojan viruses, or physical access to the device. Keyloggers do not wait for a specific condition to activate, but rather run continuously in the background and transmit the captured data to a remote server or storage device.
• Spam is any kind of unwanted, unsolicited, or irrelevant digital communication that is sent or posted to a large number of recipients or places, typically for the purposes of advertising, phishing, spreading malware, or disrupting normal operations. Spam can be delivered via email,text message, phone call, or social media. Spam does not contain hidden code that executes a harmful action, but rather relies on the user’s response or interaction to achieve its goal, such as clicking a link, opening an attachment, or providing personal information.
• A virus is a type of malware that infects a computer or mobile device by attaching itself to another program or file and replicating itself when the host program or file is executed. A virus can have various harmful effects, such as deleting or modifying data, consuming system resources, displaying unwanted messages, or opening backdoors for hackers. A virus can spread from one device to another through networks, removable media, or email attachments. A virus does not require a specific condition to activate, but rather runs whenever the infected program or file is executed.

References:

• Logic Bomb Definition & Meaning - Merriam-Webster
• What is a Keylogger? How to Detect a Keylogger? - Fortinet
• Spam | What is Spam? | Definition & Types of Spam
• Virus | Definition, Structure, & Facts | Britannica

 Distributed databases provide several advantages over centralized databases, including improved scalability, availability, performance, flexibility, fault tolerance, and security1. Here are some of the advantages of distributed databases:

• Increased availability: Distributed databases can tolerate failures of individual nodes or sites without affecting the overall system functionality. Users can access data from other sites if their local site is down or unreachable. Data replication and backup mechanisms can also enhance data availability and recovery2.
• Easier expansion: Distributed databases can be scaled horizontally by adding more nodes to the network. This allows for increased capacity and performance as data and user demand grow. Adding new sites or units to the distributed system does not require significant efforts or disruption in the existing functions2.
• Improved performance: Distributed databases can offer faster response and lower communication costs by locating data near the users who normally use that data. Distributed query processing and transaction management can also optimize the use of network and computing resources. Furthermore, distributed databases can exploit the parallelism of multiple nodes to execute operations concurrently13.

References: What Is a Distributed Database? {Features, Benefits & Drawbacks}, Advantage and Disadvantage of Distributed Database Management System (DDBMS) - Bench Partner, Advantages of Distributed database - GeeksforGeeks

Structured design and object-oriented design are two common approaches to design a system. Structured design is a method of breaking down a system into smaller and simpler modules, which can be independently created and tested. Structured design follows a top-down approach, where the system is divided into sub-systems, and then into modules, until the desired level of detail is reached. Structured design is suitable for systems that have well-defined inputs and outputs, and a clear hierarchy of functions. Object-oriented design is a method of modeling a system as a collection of objects, which have attributes and behaviors. Object-oriented design follows a bottom-up approach, where the system is built from reusable and interchangeable components, called classes. Object-oriented design is suitable for systems that have complex interactions, dynamic behavior, and multiple inheritance. Functional design and organizational design are not considered to design a system, but rather to describe the system’s purpose and structure. Functional design is a process of defining the functions and processes that the system performs, and how they relate to each other. Functional design focuses on the what and why of the system, rather than the how. Organizational design is a process of defining the roles and responsibilities of the people and units involved in the system, and how they communicate and coordinate with each other. Organizational design focuses on the who and where of the system, rather than the how. References: Structured Design - an overview | ScienceDirect Topics, Object-Oriented Design - an overview | ScienceDirect Topics, Functional Design - an overview | ScienceDirect Topics, [Organizational Design - an overview | ScienceDirect Topics]

A decompiler is a program that translates from a low-level language to a higher level one. A low-level language is one that is close to the machine code, such as assembly or binary. A higher level language is one that is more abstract and human-readable, such as C++ or Java. A decompiler can reverse-engineer the source code from an executable file, which can be useful for debugging, analysis, or modification purposes. However, decompilation is not always possible or accurate, as some information may be lost or obfuscated during the compilation process12. References: 1: What is a compiler? How source code becomes machine code12: How does an interpreter/compiler work2

 Object-oriented analysis (OOA) is the first technical activity performed as part of object-oriented software engineering. OOA involves modeling the problem domain using objects and their interactions. According to the CITM study guide, there are five steps involved to undertake an object-oriented analysis1:

• Find and define the objects
• Organize the objects
• Describe how the objects interact with one another
• Define the external behavior of the objects
• Define the internal behavior of the objects References: 1: CITM Study Guide, Chapter 4: Object-Oriented Analysis and Design, Page 63-64.

Tangible costs are those that can be easily quantified and measured, such as direct expenses or physical assets. However, in some cases, tangible costs savings can be difficult to estimatebecause they depend on various factors, such as the expected life cycle of the asset, the depreciation rate, the maintenance costs, the opportunity costs, and the market conditions. For example, if a company invests in a new production machine, the tangible cost savings would be the difference between the cost of the old machine and the cost of the new machine, plus the additional benefits of the new machine, such as higher output, lower energy consumption, and improved quality. However, these benefits may not be easy to measure or predict, especially in the long term. Therefore, tangible costs savings can be difficult to estimate in some cases. References: Tangible Cost: Meaning and Difference From Intangible Costs - Investopedia, What Are Tangible Costs? (Plus Why They Matter and Examples) | Indeed.com, Intangible Cost vs. Tangible Cost - What’s the Difference? | This vs. That, Project tangible and intangible benefits - Twproject: project management software

Data are often proprietary or confidential because they contain valuable information that can give a competitive advantage to the owner or affect the privacy of the individuals or entities involved. Data can be classified into different levels of sensitivity and protection, depending on the potential impact of unauthorized disclosure, modification, or loss. For example, data that contain personal, financial, or health information of customers or employees are usually considered highly confidential and require strict security measures. Data that contain trade secrets, intellectual property, or strategic plans are also typically proprietary and confidential, as they can affect the market position or reputation of the owner. Data that are public or non-sensitive, such as general information about products or services, may not require the same level of protection, but still need to be managed and maintained properly. References: CITM Course Outline, Module 6 - Data Management, Section 6.1 - Data Classification and Protection; Sample Exam, Question 72.

Processed or meaningful data can be defined as information, which is data that has been organized, processed, or structured in a meaningful way according to the given requirement. Information is processed data which includes data that possess context, relevance, and purpose. Information is also the output of data processing, which is the collection and transformation of raw data into useful information. Information can be used for decision-making, analysis, or communication purposes. References: 

https://careerfoundry.com/en/blog/data-analytics/what-is-data-processing/

https://www.lisedunetwork.com/definition-and-types-of-information/

Important decisions may require more care in analyzing data because they have higher stakes, greater uncertainty, and more complexity. Data analysis can help managers to identify patterns, trends, correlations, and causal relationships that can inform their decision making. Data analysis can also help managers to evaluate alternatives, test hypotheses, and predict outcomes. However, data analysis is not a substitute for judgment, intuition, and creativity. Managers should also consider the quality, reliability, and validity of the data, as well as the ethical and social implications of their decisions. References: CITM Course Outline, Sample Exam - GAQM, TEST 1 2020, questions and answers - CITM 102 TEST BANKS … - Studocu

Development cost is the type of cost that is considered as actual costs of analysis, design, and installation for the system. Development cost includes the expenses incurred during the planning, designing, building, testing, and deploying of a system. Development cost is usually estimated before the start of a project and is used to measure the feasibility and profitability of a system. Development cost is also used to monitor the progress and performance of a project and to control the scope and quality of a system. References: CITM Course Outline, Module 4, Corporate IT Strategy, page 9. CITM Training Course, Cost, page 14. CITM Certification Overview, Exam Information, Course Outline, Module 4.

Systems analysis is the second step in the Systems Design Life Cycle (SDLC), which is a process for planning, creating, testing, and deploying an information system. Systems analysis involves gathering and analyzing the requirements of the system, such as the user needs, the business objectives, and the functional specifications. Systems analysis also involves modeling the system using various techniques, such as data flow diagrams, entity-relationship diagrams, and use case diagrams. Systems analysis helps to define the scope and boundaries of the system, as well as the inputs, outputs, processes, and data structures. Systems analysis is essential for ensuring that the system design meets the expectations and needs of the stakeholders. References: 1, 2, 3, 4

https://www.geeksforgeeks.org/system-design-life-cycle-phases-models-and-use-cases/

https://www.geeksforgeeks.org/system-development-life-cycle/

Temporary work groups are formed for a specific purpose and usually dissolve after the task is completed. They may include employees of customers, suppliers or partner corporations who collaborate with the organization to achieve a common goal. For example, a temporary work group may be created to develop a new product, launch a marketing campaign, or implement a new system. Temporary work groups can benefit from the diverse perspectives, skills, and resources of their members, as well as foster innovation and learning. References: CITM Course Outline, Flexible Work Arrangements: Types and Benefits

A client-server environment is a type of distributed system that divides the application logic into three layers: presentation, application, and data. The presentation layer is responsible for the user interface and interaction, the application layer contains the business logic and functionality, and the data layer manages the storage and retrieval of data. Each layer can run on a different machine or server, allowing for scalability, modularity, and security1234 References:

• 1: Client Server Architecture: Types, Examples, & Benefits
• 2: Client-Server Model - GeeksforGeeks
• 3: What is Three-Tier Architecture | IBM
• 4: Figure 1. The Client/Server Computing Environment - IBM