GAQM CITM-001 Certified Information Technology Manager (CITM) Exam Practice Test

A data flow diagram (DFD) is a graphical representation of data flow in any system. It uses defined symbols like rectangles, circles and arrows, plus short text labels, to show data inputs, outputs, storage points and the routes between each destination1. Data flow: data flows indicate the data movement between external entities, processes, and the data store. They’re represented as arrows in the DFD with a short text label2. Therefore, the symbol that represents flow of data in DFD is arrow. References: 1: What is a Data Flow Diagram | Lucidchart 2: What Are Data Flow Diagrams? | Baeldung on Computer Science

A logic bomb is a type of malicious code that is inserted into a software program and remains dormant until a specific condition or event occurs, such as a certain date, time, or user action. When the condition is met, the logic bomb activates and executes its harmful payload, which can range from deleting or corrupting data, to displaying unwanted messages, to crashing the system. Logic bombs are often used by disgruntled employees or hackers to sabotage an organization’s IT infrastructure or to extort money or information. Logic bombs are different from keyloggers, spam, and viruses, which are explained below:

• A keylogger is a software or hardware device that records every keystroke made by a user on a computer or mobile device, usually for the purpose of stealing passwords, personal information, or other sensitive data. Keyloggers can be installed by hackers through phishing, trojan viruses, or physical access to the device. Keyloggers do not wait for a specific condition to activate, but rather run continuously in the background and transmit the captured data to a remote server or storage device.
• Spam is any kind of unwanted, unsolicited, or irrelevant digital communication that is sent or posted to a large number of recipients or places, typically for the purposes of advertising, phishing, spreading malware, or disrupting normal operations. Spam can be delivered via email,text message, phone call, or social media. Spam does not contain hidden code that executes a harmful action, but rather relies on the user’s response or interaction to achieve its goal, such as clicking a link, opening an attachment, or providing personal information.
• A virus is a type of malware that infects a computer or mobile device by attaching itself to another program or file and replicating itself when the host program or file is executed. A virus can have various harmful effects, such as deleting or modifying data, consuming system resources, displaying unwanted messages, or opening backdoors for hackers. A virus can spread from one device to another through networks, removable media, or email attachments. A virus does not require a specific condition to activate, but rather runs whenever the infected program or file is executed.

References:

• Logic Bomb Definition & Meaning - Merriam-Webster
• What is a Keylogger? How to Detect a Keylogger? - Fortinet
• Spam | What is Spam? | Definition & Types of Spam
• Virus | Definition, Structure, & Facts | Britannica

Global information systems are information systems that span multiple countries, cultures, and organizations. They enable the sharing of data, knowledge, and resources across borders and regions. However, limited access to high speed internet may impede the development of global information systems, as it affects the quality, speed, reliability, and security of communication and collaboration. According to the International Telecommunication Union (ITU), in 2020, only 51.4% of the world’s population had access to the internet, and only 19.1% had fixed broadband subscriptions1. This means that many people and regions are still digitally excluded or underserved, especially in developing countries and rural areas. This digital divide may create challenges and barriers for the design, implementation, and management of global information systems, such as:

• Lack of infrastructure and resources: Developing and maintaining global information systems requires adequate and stable infrastructure and resources, such as servers, routers, cables, satellites, power supply, bandwidth, etc. However, many regions lack the necessary infrastructure and resources to support high speed internet access, or face high costs and risks of disruption or damage2. This may limit the availability, performance, and scalability of global information systems, and increase the complexity and cost of their development and maintenance.
• Lack of interoperability and standardization: Global information systems need to ensure interoperability and standardization among different systems, platforms, protocols, formats, and languages. However, limited access to high speed internet may hinder the adoption and integration of common standards and technologies, such as cloud computing, web services, APIs, etc. This may result in compatibility issues, data inconsistency, and inefficiency of global information systems, and require more effort and coordination to achieve interoperability and standardization3.
• Lack of user participation and satisfaction: Global information systems need to consider the needs, preferences, and expectations of diverse and distributed users and stakeholders. However, limited access to high speed internet may affect the userparticipation and satisfaction of global information systems, as it may reduce the usability, accessibility, and functionality of the systems, and cause delays, errors, or failures of communication and collaboration. This may lead to user frustration, dissatisfaction, and resistance, and lower the adoption and acceptance of global information systems.

References: Measuring digital development: Facts and figures 2020, Challenges and Opportunities of Global Information Systems Development: A Comparative Analysis, Global Information Systems: Challenges and Opportunities, [The Impact of Internet Speed on Online User Behaviour and Satisfaction]

Managerial control is the process of ensuring that the organization’s activities and outputs are aligned with its goals and plans. Coordination is the process of integrating the efforts of different units and individuals within the organization to achieve a common purpose. Both control and coordination are essential functions of management that aim to improve the performance and efficiency of the organization. They are closely related because they both involve setting standards, measuring performance, and taking corrective actions. They also both require communication, feedback, and cooperation among the managers and employees12345 References:

• 1: The Control Function of Management - MIT Sloan Management Review
• 2: Managerial Control | Definition, Types & Features - Study.com
• 3: Relationship between planning and controlling - Management Study Guide
• 4: Question Bank - Multiple Choice Questions (MCQs) - DACC
• 5: 4 Different Relationship between Planning and Control Expalined - Toppr

 Managers today make Information Technology an integral part of their jobs because IT plays a fundamental role in both the structure and control of the modern business. IT enables managers to perform various tasks such as planning, organizing, leading, and controlling more efficiently and effectively. IT also helps managers to communicate, coordinate, and collaborate with internal and external stakeholders, as well as to access, analyze, and interpret information for decision making. IT also supports innovation, creativity, and competitiveness in the dynamic and globalized environment. Therefore, managers need to have an excellent grasp of the functionality, capabilities, and effects of the technology that they implement and manage. References: 

An attribute is a property that describes various characteristics of an entity. For example, an entity type called Employee may have attributes such as name, age, salary, department, etc. An attribute can also be a primary key that uniquely identifies an entity instance, or a foreign key that references another entity type. An attribute can have a data type, a domain, and a constraint that define its format, range, and validity. An attribute is represented by an oval in an ER diagram, and by a column in a table. References: 3, EXIN EPI Certified Information Technology Manager - EXIN (page 23)

The second step in System Analysis is to conduct a feasibility study, which is an assessment of the technical, economic, legal, operational, and schedule aspects of the proposed system. A feasibility study helps to determine whether the system is viable, beneficial, and achievable within the given constraints and resources. A feasibility study also helps to identify the risks, costs, benefits, and alternatives of the system. References: 1, 2, 3

1: Certified IT Manager (CITM) Course Outline, EPI-AP, page 9 2: System Analysis vs System Design - What are the Differences?, GeeksforGeeks, section “Differences between System Analysis and System Design” 3: Step Response of Second Order System - Online Tutorials Library, TutorialsPoint, section “Follow these steps to get the response (output) of the second order system in the time domain.”

Step three (3) in undertaking of object-oriented analysis does not define the methods, but rather identifies the states of each object and the events that affect them. Methods are defined in step four (4), which is the object-oriented design phase. Methods are the operations or functions that an object can perform to achieve its objectives or respond to events. References: Object-Oriented Analysis and Design | OOAD - GeeksforGeeks, Steps to Analyze and Design Object Oriented System - GeeksforGeeks, OOAD - Object Oriented Analysis - Online Tutorials Library

A foreign key is a column or a set of columns in one table that references the primary key of another table. It is used to create a link and relationship between tables in a relational database. A foreign key ensures that the values in the referencing table match the values in the referenced table, thus maintaining the referential integrity of the database12. A foreign key can also be used to implement constraints such as cascading updates or deletes3. References: 1: CITM Study Guide, Chapter 3: Database Management Systems, Page 41. 2: Types of Keys in Relational Model (Candidate, Super, Primary, Alternate and Foreign) 3: Database Keys: The Complete Guide (Surrogate, Natural, Composite & More)

Processing modes are the ways of organizing data and operations in a computer system. Batch processing, time-sharing, and online are all examples of processing modes, but process is not. A process is a program or a set of instructions that is executed by the CPU. A process can run in different processing modes, depending on the system design and the user requirements. For example, a process can run in batch mode, which means that it is executed without user interaction and with a set of input data. Alternatively, a process can run in time-sharing mode, which means that it is executed in a shared environment with multiple users and with interactive input and output. Finally, a process can run in online mode, which means that it is executed with continuous connection to a network and with real-time input and output. References: EPI-USA, CITM Course Outline, Module 2: IT Infrastructure, Slide 9. GAQM, CITM Exam Objectives, Domain 2: IT Infrastructure, Objective 2.1: Understand the basic concepts of IT infrastructure. Includehelp, MCQ | Modes of Operations in Block Cipher.

A primary key is a column or combination of columns that contain values that uniquely identify each row in the table. It enforces the entity integrity of the table and prevents the insertion of duplicate rows. A table can have only one primary key, which is usually defined on an identity column or a column with not null and unique constraints. A primary key also creates a unique index for the table, which allows fast access to data when the primary key is used in queries12. References: 1: Primary and Foreign Key Constraints - SQL Server12: Primary and Foreign Key in SQL With Examples - DataFlair2

A malicious program that records a user’s keystrokes is an example of a Trojan horse. A Trojan horse is a type of malware that masquerades as a legitimate file or application, but secretly performs malicious actions in the background. A Trojan horse can be used to install other malware, such as keyloggers, on the victim’s device. A keylogger is a specific type of Trojan horse that captures and sends the user’skeystrokes to a remote attacker, who can use them to steal sensitive information, such as passwords, credit card numbers, or personal data.

The other options are not correct because:

• Adware is a type of malware that displays unwanted advertisements on the user’s device, often redirecting them to malicious websites or installing more malware. Adware does not necessarily record the user’s keystrokes, although some adware may have keylogging capabilities.
• An anti-virus program is a software that protects the user’s device from malware, such as viruses, worms, ransomware, spyware, etc. An anti-virus program does not record the user’s keystrokes, but rather scans and removes any malicious programs that may do so.
• A performance monitor is a software that measures and displays the performance of the user’s device, such as CPU usage, memory usage, disk space, network traffic, etc. A performance monitor does not record the user’s keystrokes, but rather provides useful information for troubleshooting or optimizing the device.

References:

• CITM Study Guide, Chapter 7: IT Security Management, pp. 131-132
• What Is a keylogger and how to detect keystroke logging - Norton
• Keylogger: how to recover the infected pc? - Panda Security

Globalization is the process of increasing economic, political, and cultural integration and interdependence across the world. Some of the impacts of globalization are:

• Rationalized manufacturing: Globalization enables firms to produce goods and services in different locations according to their comparative advantages, such as lower costs, higher quality, or better access to markets. This leads to more efficient and competitive production, as well as increased specialization and trade.
• Managing risk across currencies: Globalization exposes firms and individuals to fluctuations in exchange rates, which affect the value of their assets, liabilities, and incomes. To manage this risk, they may use various financial instruments, such as hedging, derivatives, or currency swaps, to reduce their exposure or benefit from favorable movements.
• Worldwide purchase: Globalization expands the range and availability of goods and services that consumers can purchase from different countries and regions. This increases consumer choice, lowers prices, and improves quality and variety. It also creates opportunities for cross-cultural learning and exchange.

References: 

Conversion is the process of changing the existing system to the new system. It involves transferring data, installing hardware and software, training users, and decommissioning the old system. Conversion is the ninth step in the Systems Design Life Cycle, according to the CITM study guide1 References: 1 CITM Study Guide, Chapter 4: System Development Life Cycle, page 4-14.

Information derived from processing transaction reduces uncertainty about a firm’s order backlog or financial position because it provides a quantitative and forward-looking measure of demand. Order backlog is the amount of orders that a firm has received but not yet fulfilled. It reflects the expected future revenue and cash flows of the firm, as well as its ability to meet customer needs and expectations. Order backlog can also indicate the competitive position and market share of the firm, as well as its operational efficiency and capacity utilization. Therefore, disclosing order backlog can help stakeholders such as investors, analysts, managers, and regulators to assess the firm’s performance and prospects more accurately and reliably. References: Sample Exam - GAQM, page 4; Implications of Disclosing Order Backlog, page 1-2; Backlog Definition, Implications, and Real-World Examples - Investopedia

Reciprocal interdependence occurs when two organizations depend on each other in a cyclical manner, such that the output of one becomes the input of the other and vice versa. This type of interdependence is the most complex and difficult to manage, as it requires constant coordination and communication between the organizations. An example of reciprocal interdependence is the relationship between a software development company and a software testing company, where each one relies on the feedback and quality of the other’s work. References: Three Types of Interdependence in an Organizational Structure, Interdependence in International Organization and Global Governance

 Sequential interdependence occurs when the output of one unit or group becomes the input for another. This type of interdependence requires coordination and communication among the units or groups involved, as any delay or error in one unit can affect the performance of the next unit. An example of sequential interdependence is an assembly line, where each stage of production depends on the previous one12 References:

• 1: 9.4 Intergroup Behavior and Performance - OpenStax
• 2: Three Types of Interdependence in an Organizational Structure | Small Business - Chron.com

Coordination is the process of aligning and integrating the activities, resources, and efforts of different units or individuals within an organization or a network of organizations. Coordination is a major problem for the global firm because it involves managing the complexity, diversity, and uncertainty of operating across multiple countries, cultures, and markets. Global firms face various challenges in coordinating their strategies, structures, systems, processes, and people, such as:

• Balancing the need for global integration and local responsiveness, which requires finding the optimal degree of standardization and adaptation of products, services, policies, and practices across different regions and markets.
• Managing the trade-offs between centralization and decentralization, which involves deciding how much authority and autonomy to delegate to the local units versus retaining at the headquarters or regional hubs.
• Fostering collaboration and communication across geographical, functional, and cultural boundaries, which requires overcoming the barriers of distance, time zones, languages, and norms.
• Leveraging the benefits of diversity and avoiding the pitfalls of fragmentation, which entails creating a shared vision, values, and culture that can unify the diverse and dispersed workforce and stakeholders.
• Coping with the environmental turbulence and uncertainty, which demands developing the capabilities to sense, respond, and adapt to the changing customer needs, competitor moves, and regulatory requirements.

Coordination is essential for the global firm to achieve efficiency, effectiveness, innovation, and competitiveness in the global market. However, coordination is not easy or costless, as it requires investing in various mechanisms and tools, such as:

• Formal structures and systems, such as organizational design, reporting lines, performance measurement, and control systems, that define the roles, responsibilities, and relationships among the different units and individuals.
• Informal practices and processes, such as culture, norms, values, and routines, that shape the behaviors, attitudes, and interactions of the organizational members.
• Information and communication technologies, such as intranet, email, video conferencing, and social media, that facilitate the exchange of information and knowledge across the organization.
• Human resource management, such as recruitment, training, development, compensation, and motivation, that attract, retain, and develop the talent and skills of the global workforce.
• Coordination by principles, such as mission, vision, strategy, and goals, that provide the direction, guidance, and alignment for the organization.

References: Practice coordination by principles: a contemporary MNC approach to …, Coordination Problems - Definition and examples — Conceptually, Emergence of Coordination in Growing Decision-Making … - Hindawi.

Development cost is the type of cost that is considered as actual costs of analysis, design, and installation for the system. Development cost includes the expenses incurred during the planning, designing, building, testing, and deploying of a system. Development cost is usually estimated before the start of a project and is used to measure the feasibility and profitability of a system. Development cost is also used to monitor the progress and performance of a project and to control the scope and quality of a system. References: CITM Course Outline, Module 4, Corporate IT Strategy, page 9. CITM Training Course, Cost, page 14. CITM Certification Overview, Exam Information, Course Outline, Module 4.

According to the CITM certification, there are six trends that have drastically altered the way organizations use technology. These are:

• Cloud computing: The delivery of computing services over the internet, such as servers, storage, databases, networking, software, analytics, and intelligence. Cloud computing enables organizations to access scalable, flexible, and cost-effective IT resources on demand.
• Big data and analytics: The collection, processing, and analysis of large and complex data sets to generate insights and value. Big data and analytics enable organizations to improve decision making, optimize operations, enhance customer experience, and create new products and services.
• Social media and collaboration: The use of online platforms and tools to communicate, share, and interact with others. Social media and collaboration enable organizations to engage with customers, employees, partners, and stakeholders, as well as to foster innovation and knowledge sharing.
• Mobile and wireless: The use of devices and networks that allow users to access information and services anytime and anywhere. Mobile and wireless enable organizations to extend their reach, improve productivity, and offer convenience and personalization.
• Internet of things (IoT): The network of physical objects that are embedded with sensors, software, and other technologies to connect and exchange data with other devices and systems. IoT enables organizations to monitor and control their assets, processes, and environments, as well as to create new business models and opportunities.
• Cybersecurity: The protection of information systems and data from unauthorized access, use, disclosure, modification, or destruction. Cybersecurity enables organizations to safeguard their assets, reputation, and trust, as well as to comply with laws and regulations.

References:

• CITM certification, page 9
• McKinsey Technology Trends Outlook 2023
• Here’s how technology has changed the world since 2000
• 10 Ways Technology Has Reshaped the Modern Workplace

Important decisions may require more care in analyzing data because they have higher stakes, greater uncertainty, and more complexity. Data analysis can help managers to identify patterns, trends, correlations, and causal relationships that can inform their decision making. Data analysis can also help managers to evaluate alternatives, test hypotheses, and predict outcomes. However, data analysis is not a substitute for judgment, intuition, and creativity. Managers should also consider the quality, reliability, and validity of the data, as well as the ethical and social implications of their decisions. References: CITM Course Outline, Sample Exam - GAQM, TEST 1 2020, questions and answers - CITM 102 TEST BANKS … - Studocu

In object-oriented approach, a program is composed of classes and objects that interact with each other through messages. A class is a blueprint that defines the attributes and behaviors of a group of similar objects. An object is an instance of a class that has its own state and canperform actions defined by the class. Objects can be related to each other through different types of relationships, such as inheritance, association, aggregation, and composition. Object-oriented approach aims to model the real-world entities and problems in terms of objects and their interactions, making the program more modular, reusable, and maintainable. References: Object Oriented Approach - Online Tutorials Library, What is object-oriented programming? OOP explained in depth - Educative, Object-oriented programming - Wikipedia

A DBMS is software that monitors and maintains accurate, quality data in a data structure. It helps organizations optimize, store, retrieve and manage data in a database. A DBMS consists of a group of programs that manipulate the database and accept requests for data from an application or user. A DBMS can also provide security, redundancy, abstraction, and multiple views of the data. A DBMS that stores data in tables and uses relationships between them is called a relational DBMS or RDBMS. Some examples of popular DBMS software are PostgreSQL, Oracle Database, Microsoft SQL Server, MySQL, SQLite, IBM Db2, etc. References: What is DBMS? Database Management Systems, Explained, What Is a DBMS? - LearnSQL.com, Database management system (DBMS) | Definition & Facts.

Organizations are linked extensively to increase their efficiency and effectiveness in achieving their goals. By reducing cycle times, organizations can deliver their products or services faster and more responsively to their customers. By improving accuracy, organizations can reduce errors, waste, and rework, and enhance their quality and reliability. These outcomes can also increase the capability of the organization to meet the changing needs and expectations of the market and the stakeholders. References: Sample Exam - GAQM, page 1, question 1; The Future of Flexibility at Work, paragraph 4.