INFORMATION SYSTEMS AND I.T.

AUDIT (ML-303)

ICMA.

SEMESTER- 3

SPRING (AUGUST) 2014 EXAMINATIONS

Thursday, the 21st August 2014

Pakistan
Time Allowed:

02 Hours 30 Minutes

Maximum Marks: 80

Roll No.:

(i)

Attempt all questions.

(ii)

Answers must be neat, relevant and brief.

(iii)

DO NOT write your Name, Reg. No. or Roll No., or any irrelevant information inside the answer script.

(iv)

Read the instructions printed inside the top cover of answer script CAREFULLY before attempting the paper.

(v)

In marking the question paper, the examiners take into account clarity of exposition, logic of arguments,
effective presentation, language and use of clear diagram/ chart, where appropriate.

(vi)

Question Paper must be returned to invigilator before leaving the examination hall.
MARKS

Q.2 (a) Enterprise Resource Planning (ERP) is an industry term for integrated, multi-mode
application software packages that are designed and support multiple business
functions. Due to importance and effective operational needs, an automobile
manufacturing industry management plans to implement ERP system in order to
integrate its different departmental functions. Briefly explain different implementation
phases of ERP system. Discuss benefits achieved to the company by effectively
implementing ERP system in organization.

09

(b) Recent research shows that most of the time approx 80% CPU of computer system
remains in idle state. Operating system is a resource manager and optimize the CPU
resources. Discuss different classes of operating system.

05

Q.3 (a) A Decision Support System (DSS) is an interactive information system that provides
information, models and data manipulation tools to help make decisions in semistructured and unstructured situations. Discuss eight important techniques used in
decision making in Decision Support System (DSS).

10

(b) MIS system has been deployed in an organization and has advertised Data Base
Administrator (DBA), Project manager and application developer jobs in leading
newspaper to fulfil its vacant positions. Discuss role and job description of each post to
effectively implement and manage MIS system in organization.

06

Q.4 (a) A multinational bank has established a data center in its head office. 50 Terabyte
capacity Storage Area Network (SAN), Blade server, CISCO router and PIX firewalls
have been deployed in network infrastructure of data center. Proper environment and
physical controls can ensure equipment reliability as per manufacturer like IBM &
CISCO recommendations in equipments data sheets, which can reduce risk of any
downtime. The management of the bank has engaged an IT auditor for LAN and
Network operating review. Consider yourself as an IT Auditor, highlight the minimum six
requirements related to organization LAN and Network operating review.

10

(b) Due to revolution in networks technology, wireless security provide prevention of

unauthorized access or damage to computers using wireless networks. Discuss three
principal ways to secure wireless networks.

06

PTO

1 of 2

ISITA/August-2014

MARKS

Q.5 (a) Students of XYZ University have developed mobile applications and have advertised on
university web site. To promote this product through e-commerce activity they need a
merchant account. Discuss need and requirement of merchant account in our country
to promote e-commerce business activities. Elaborate six different payment methods
used in e-commerce business?

09

(b) For all customers, partners, resellers, and distributors who hold valid Cisco service
contracts, Cisco Technical Support provides 24-hour-a-day, award-winning technical
assistance. The Cisco Technical Support Website provides online documents and tools
for troubleshooting and resolving technical issues with Cisco products and technologies.
M/s UNICOM network manager has decided to upgrade its CISCO12000 series router
as per CISCO TAC (Technical assistant support center) recommendation. Change
management procedure is used when changing hardware, upgrading operating system
and configuring various network devices. Discuss effects of proper procedures/ SOPs
followed and deployed during this migration process.

07

Q.6 (a) Most business continuity tests fall short of a full-scale test to all operational portion of
the corporation. The test should address all critical components and simulate actual
prime-time processing conditions. Discuss different tasks to be accomplished by
Continuity Plan Testing? Explain five test phases that should be completed to perform
full testing.

09

(b) Software development practitioners have developed alternative development strategies

to reduce development time, maintenance costs or to improve the quality of software.
Compare advantages and disadvantages of waterfall model, spiral model and
prototyping models used in software development methodologies.

09

THE END

2 of 2

ISITA/August-2014