2501. Choose the fault class in which the following automated static analysis check would fall: Unreachable code?
comments icon0

A. Data Faults

B. Interface faults

C. Input/Output Faults

D. Control Faults
2502. Which reliability requirements are concerned with maintaining copies of the system ?
comments icon0
A. Recovery requirements

B. Redundancy requirements

C. Ambiguous requirements

D. Checking requirements

2503. Which reliability metric sets out the probable number of system failures that are likely to be observed relative to a certain time period ?
comments icon0

A. AVAIL

B. None of the mentioned

C. ROCOF

D. POFOD

2504. Which level of Static Analysis allows specific rules that apply to a program to be checked ?
comments icon0

A. Characteristic error checking

B. All of the mentioned

C. User-defined error checking

D. Assertion checking

2505. A characteristic of a software system that can lead to a system error is known as _____________________ ?
comments icon0

A. Human error or mistake

B. System failure

C. System error

D. System fault
2506. An aircraft engine normally includes automatic fire extinguishers.What kind of dependability and security issue the example states ?
comments icon0

A. Hazard detection

B. Hazard detection and removal

C. Damage limitation

D. Hazard avoidance

2507. What is the term for a system that is designed such that the faults in the delivered software do not result in system failure ?
comments icon0

A. Fault detection

B. Fault Avoidance

C. Fault tolerance

D. None of the mentioned

2508. An erroneous system state that can lead to system behavior that is unexpected by system users is known as________________?
comments icon0

A. System failure

B. Human error or mistake

C. System error

D. System fault

2509. Choose the fault class in which the following automated static analysis check would fall:Non-usage of the results of functions?
comments icon0

A. Input/Output Faults

B. Data Faults

C. Interface faults

D. Storage management faults

2510. Which of the following terms is a measure of the probability that the system will cause an accident ?
comments icon0

A. Hazard probability

B. Accident

C. Risk

D. Damage

2511. At which stage of risk analysis specification, the additional security requirements take account of the technologies used in building the system and system design and implementation decisions ?
comments icon0

A. All of the mentioned

B. Operational risk analysis

C. Life-cycle risk analysis

D. Preliminary risk analysis

2512. A weakness in a computer-based system that may be exploited to cause loss or harm is known as ?
comments icon0

A. Attack

B. Exposure

C. Vulnerability

D. Threat

2513. The safety of a system is a system attribute that reflects the systems ability to operate, normally or abnormally, without injury to people or damage to the environment ?
comments icon0
A. True

B. FALSE

2514. What is Life cycle risk assessment ?
comments icon0

A. None of the mentioned

B. Risk assessment while the system is being developed

C. All of the mentioned

D. Risk assessment before the system has been deployed

2515. Which of the following is not a functional reliability requirement for a system ?
comments icon0
A. Ambiguous requirements

B. Redundancy requirements

C. Checking requirements

D. Recovery requirements

2516. Which process characteristic with respect to Dependability Engineering is mentioned by the statement: The process should be understandable by people apart from process participants ?
comments icon0
A. Auditable

B. None of the mentioned

C. Documentable

D. Diverse

2517. How many stages are there in Risk-driven requirements specification ?
comments icon0
A. four

B. six

C. three

D. five

2518. Which of the following is a bad practice of Dependable programming ?
comments icon0

A. Check all inputs for validity

B. None of the mentioned

C. Limit the visibility of information in a program

D. Check array bounds
2519. Security engineering is only concerned with maintenance of systems such that they can resist malicious attacks ?
comments icon0

A. TRUE

B. False
2520. Which of the following is a layer of protection for Security ?
comments icon0

A. Platform-level protection

B. Record-level protection

C. All of the mentioned

D. Application-level protection

2521. Exception handling is a mechanism to provide some fault avoidance ?
comments icon0
A. False

B. TRUE

2522. Choose the fault class in which the following automated static analysis check would fall:Pointer Arithmetic ?
comments icon0

A. Input/Output Faults

B. Interface faults

C. Data Faults

D. Storage management faults
2523. A system resource that has a value and has to be protected is known as ________________________?
comments icon0

A. Vulnerability

B. None of the mentioned

C. Asset

D. Control

2524. A chemical plant system may detect excessive pressure and open a relief valve to reduce these pressures before an explosion occurs. What kind of dependability and security issue the example states ?
comments icon0

A. Hazard detection

B. Damage limitation

C. Hazard detection and removal

D. Hazard avoidance

2525. Which of the following examples does not involve dependability engineering ?
comments icon0

A. Telecommunications

B. Medical Systems

C. Library Management

D. Power Systems

2526. POFOD stands for___________________?
comments icon0

A. Possibility of failure on demand

B. Probability of failure on demand

C. Possibility of failure of data

D. Probability of failure of data

2527. Which of the following is a technique covered in Static Analysis ?
comments icon0
A. All of the mentioned

B. Formal verification

C. Model checking

D. Automated program analysis

2528. Static analysis is now routinely used in the development of many safety and security critical systems?
comments icon0

A. FALSE

B. True
2529. What is the term for development process organised such that faults in the system are detected and repaired before delivery to the customer ?
comments icon0

A. Fault tolerance

B. None of the mentioned

C. Fault Avoidance

D. Fault detection

2530. To specify security requirements, one should identify the risks that are to be dealt with ?
comments icon0

A. TRUE

B. False
2531. Circumstances that have potential to cause loss or harm is known as___________________?
comments icon0

A. Vulnerability

B. Threat

C. Attack

D. Control

2532. What is a Range check ?
comments icon0

A. None of the mentioned

B. Use information about the input to check if it is reasonable rather than an extreme value

C. Check that the input falls within a known range

D. Check that the input does not exceed some maximum size e.g. 40 characters for a name

2533. Which of the following is a Strategy to achieve Software diversity ?
comments icon0

A. Explicit specification of different algorithms

B. Different programming languages

C. All of the mentioned

D. Different design methods and tools

2534. Controls that are intended to ensure that attacks are unsuccessful is analogous to ______________ in dependability engineering?
comments icon0

A. Fault tolerance

B. Fault avoidance

C. Fault Recovery

D. Fault detection

2535. A password checking system that disallows user passwords that are proper names or words that are normally included in a dictionary is an example of ________________ with respect to security systems?
comments icon0

A. asset

B. control

C. attack

D. risk

2536. Select the disadvantage of using Formal methods ___________________?
comments icon0
A. They require the use of specialised notations that cannot be understood by domain experts

B. Producing a mathematical specification requires a detailed analysis of the requirements

C. Concurrent systems can be analysed to discover race conditions that might lead to deadlock

D. All of the mentioned

2537. Which of the following is incorrect with respect to Model Checking ?
comments icon0

A. Model checking is particularly valuable for verifying concurrent systems

B. The model checker explores all possible paths through the model

C. All of the mentioned

D. Model checking is computationally very inexpensive
2538. What are security controls ?
comments icon0
A. All of the mentioned

B. Controls that are intended to detect and repel attacks

C. Controls that are intended to support recovery from problems

D. Controls that are intended to ensure that attacks are unsuccessful

2539. Consider a case where the system is unavailable and cannot deliver its services to users. What type of failure is being described here ?
comments icon0
A. Loss of service

B. None of the mentioned

C. System/data corruption

D. Incorrect service delivery

2540. Which of the following is not a Protection system ?
comments icon0

A. None of the mentioned

B. System to shut down a reactor if temperature/pressure are too high

C. System to indicate not returning of the library book

D. System to stop a train if it passes a red light

2541. An assessment of the worst possible damage that could result from a particular hazard is known as _________________?
comments icon0

A. Mishap

B. Hazard severity

C. Hazard probability

D. Risk

2542. Static Analysis involves executing a program ?
comments icon0
A. False

B. TRUE

2543. An event that occurs at some point in time when the system does not deliver a service as expected by its users is called __________________?
comments icon0
A. System failure

B. Human error or mistake

C. System error

D. System fault

2544. An impersonation of an authorised user is an example of a security threat ?
comments icon0
A. False

B. TRUE

2545. Consider a case where the failure of the system causes damage to the system itself or it data. What type of failure is being described here ?
comments icon0

A. Incorrect service delivery

B. Loss of service

C. None of the mentioned

D. System/data corruption
2546. Choose the fault class in which the following automated static analysis check would fall:Variables declared but never used?
comments icon0

A. Input/Output Faults

B. Interface faults

C. Control Faults

D. Data Faults
2547. Which of the following term is best define by the statement:Each object is stored only once, but is accessible by all CASE tools that need it.?
comments icon0

A. Data independence

B. Ad Hoc data queries and reports

C. Non-redundant data storage

D. Transaction control

2548. Source code translation is a part of which re-engineering technique ?
comments icon0

A. Refactoring

B. None of the mentioned

C. Restructuring

D. Data re-engineering

2549. Which of these benefits can be achieved when software is restructured ?
comments icon0

A. Software easier to test

B. All of the mentioned

C. Reduced maintenance effort

D. Higher quality programs

2550. Which tools are used to modify online database systems ?
comments icon0

A. Reverse engineering specification tools

B. online system re-engineering tools

C. Test management tools

D. Code restructuring and analysis tools