The following questions were contained in the Spring 2007 Comprehensive Exam.

ISQA 8060 - RESEARCH IN MIS

1. Please answer all parts of this question. Clearly state and explain all assumptions. Appended below is a proposed research project that you are planning to conduct. To further expand this proposal, you need to answer the following questions.
   1. Please describe the phenomenon that needs to be investigated and state what you think still needs to be known about this phenomenon?.. 10%
   2. State or define the problem under investigation… 10%.
   3. What are the key concepts that need to be investigated in this study ?… 20%.
   4. Based on the answers above, describe what concepts and relationships between these concepts you would use to investigate the research problem … 20%.
   5. Please design a research project to investigate the research problem. Be sure to clearly explain your research strategy, method(s), tools and techniques … 20%.
   6. Would this be qualitative or quantitative research? Briefly describe the deliverables of this research and how, or under what circumstances, this very same research could become the opposite of whatever your answer is… 20%.

   According to the Standish Group's 2004 third quarter report, 29% of all projects succeeded (delivered on time, on budget, with required features and functions), 53% were challenged (late, over budget and/or with less than the required features and functions), and 18% failed (cancelled prior to completion or delivered and never used) (Standish Group, 2005a). The CHAOS report cites User Involvement, Executive Management Support, and Clear Statement of Requirements as the top three criteria for success in IS projects. The existence of a hard working staff was considered to be least important in ensuring success of IS projects (Standish Group, 2005b).The high incidence of implementation failures has traditionally been attributed to a lack of stakeholder participation in information systems development (Markus and Robey, 1988; Franz and Robey, 1984; Land and Hirschheim, 1983; Avison and Wood-Harper, 1990). Consequently information systems development methodologies such as ISAC (Lundberg, Goldkuhl, and Nissen, 1982), ETHICS (Mumford and Weir, 1979), and techniques such as Joint Application Development (Andrews and Leventhal, 1993) include participation.

   Even current wisdom on the use of traditional information systems development methodologies such as Structured Analysis and Design, SSADM, and information engineering (Downs, Clare, and Coe, 1988; Martin and Finkelstein, 1981) are suggested as tools for participation. Arguments for participation include that it 1) is seen to allow the interests of the individuals who must use the system to be protected, 2) provides the means through which individuals can use the system as a basis for re-design of their jobs and working environment, 3) facilitates compliance with results of decision making, 4) increases motivation leading individuals identifying with the system they design towards higher productivity and more efficiency, and 5) enables the system to be constructed in such a way as to provide the best possible fit between the needs of the organization and those who work for it (Land and Hirschheim, 1983; Mumford, 1981; Montazemi, 1988; Franz and Robey, 1986). These arguments point towards the overall benefit that participation improves the prospects of developing systems that are both technically and organizationally valid (Newman and Robey, 1992).

   However, evidence supporting these benefits of participation is at best contradictory. In a study carried out by Jarvenpaa and Ives (1991) of 83 US firms, the CEO's perception of IT appeared to be a more powerful predictor of a firm's progressive use of IT rather than a CEO's personal participation. Newman and Robey (1992) report on episodes in which users rejected a system because participation had resulted in conflict between the users and the computer centre. As the development of information systems brings together people from different departments, Robey et al. (1989) suggest that the potential for conflict in systems development is great and potential disagreements are likely to become manifest under conditions of high interdependence among group members in project meetings. Further reasons for this contradiction have been attributed to reasons such as involving users in the design process may lead potential delays caused by having to deal with multiple user groups and possible sub-optimal system design because of the involvement of competing user groups (Land and Hirschheim, 1983).

2. You are asked to develop a research proposal and design for. Address the following in your presentation.
   1. What is the phenomenon you observe in this case… 10%
   2. What concepts would you use to help you understand this phenomenon? ..20%
   3. Please design a research project to investigate the problem being posed in this company… 30%
   4. Present an outline of a research proposal you would submit to Signal International. Explain each section of the outline… 30%
   5. What would be the deliverables(s) of this research project …10%

   ERP Failure at Signal International

   Signal International is a reputed multinational corporation based in Australia. Their principle offices are located in Sydney Detroit and Zurich. All transactions are primarily routed from here to their branches located all over the world. Apart from that the company has few production plants in countries as far as India and China. In addition they undertake franchising services for a number of international brands and distribute them in the local markets with their expertise. The production plants manufacture and sell goods under the banner of "Signal International". When it comes to franchising of other brands each office acts independently without necessarily associating it with another local office in a different country.

   The company decided to implement Enterprise Resource Planning (ERP) systems for all its offices. They hired the services of E-Systems for implementing an ERP software program called Global Lease. Their subsidiary company Tuukku was referred for consulting services. The troubles started off right from the Implementation process. The ERP software is specialized in providing services for companies that follows common practices in all its offices. However Signal international did not have such a system. In addition they have acquired few companies who have their own ways and means of working. This contradiction did lot of mishap in the organizational procedures. People in the respective offices did not use ERP properly and resorted to adopt their own style of working thereby making ERP's intervention meaningless and unproductive.

   It was then decided to ensure operational efficiency and correct the inherent errors in ERP and acclimatize it to the organization within a period of 4 months. Training programs were arranged by hiring experts from the software major. However the trainers developed software in the Polish language because they were not used to Chinese or English. When the installation process began the first process went undisturbed. The phase of installing proved to be trouble free and spic and span. The formatting of data set the next trouble. The data formats used by the company were totally unacceptable to the ERP software. This necessitated conversion to the format preferred by Global lease.

   The next problem was with the business process. The personnel from the software company could not deal with the various demands of Signal International in using the software to suit the business process. They were undoubtedly experts in handling software but could not render any assistance as far as new business practices and changes to the existing ones were concerned. Finally the company had to drop the idea of ERP in order to avoid anymore losses and damages. Signal International have asked to you to investigate the factors affecting the success of enterprise wide systems.

ISQA 8110 - MODERN SOFTWARE DESIGN

1. Compare and contrast "code and fix" development, as often used in web-based e-commerce applications, with structured analysis and design.
2. Describe use-case scenarios; analyze and discuss their content, form, and use in CRC analysis and design and in O-O implementation, testing, and long term maintenance.

ISQA 8210 - SOFTWARE PROJECT MANAGEMENT & ISQA 8220 - SYSTEMS ANALYSIS AND DESIGN (take home portion)

• Some may consider the construction industry stuck in the dark ages in terms of technology. Many of the nation's largest home builders still rely on spreadsheets and paper-based processes for procurement, customer service, and management of the construction process. Creating customized IT applications for activities, like procurement and warranty service, aren't glamorous in other industries, but can offer big returns and advantages for this industry that is severely lagging behind in its use of IT.

  Assume that you have just been appointed as the director of IT for HomeBuilders, a medium-size residential construction company that operates nationwide. Your department has been tasked to create a system of web applications to support the entire home construction process ranging from land-planning to purchasing to resource scheduling to marketing to customer service. This will allow employees from across the organization working in multiple cities to coordinate more easily with one another.

  You believe that some components for this IT overhaul could be packaged systems; however, much of the software will need to be developed in-house. Furthermore, any packaged system will need to be integrated with customized software developed by the firm. You have to develop a plan for this in-house effort, both from a systems development perspective and a project management perspective.

  1. Start by writing a summary report that details your recommended strategy. Address the report to the CEO of HomeBuilders, but recognize that other key stakeholders will read it as well. This means you need to use understandable language while communicating technical concerns and solutions. The report should provide a recommendation for each of the following issues:
     1. What (combination of) systems development method(s) will you use for this project? Why is this (combination of) method(s) the best one for this specific project?
     2. What are the potential risks with this approach and how will you mitigate them? Name at least 3 risks.
     3. What are the key project management issues for this project and what must be done to ensure the success of the project? Name at least 3 project management issues.
  2. Assume that your CEO has accepted your recommendation and you are authorized to proceed with the project as you have described it. Now, write a second report for your systems development staff. The report should address each of the following issues:
     1. What are the systems development techniques that your analysts and designers will have to use for the project? Why are these techniques the best choice for this specific project?
     2. What change strategies are you going use to transition your systems development staff to the new situation? Name at least 3 strategies.

ISQA 8310 - DATA COMMUNICATIONS

1. Internet Protocol version 4 (IPv4) is set to be replaced by Internet Protocol version 6 (IPv6). Discuss why IPv4 needs to be replaced. In your response, make sure to address the following issues and don't forget to explain how IPv6 overcomes the issues with IPv4.
   1. One type of addressing used with Ipv4 is called class-based addressing. Describe the major classes in class-based addressing including:
      1. the classes and their distinguishing characteristics (bit formats, dotted decimal formats)
      2. number of bits in an address
      3. maximum number of networks and hosts for each class (e.g., which networks are large, and which are small?)
   2. Classless addressing is another type of addressing used with Ipv4.
      1. What is classless addressing, and why is it used?
      2. What is CIDR notation? Why is it used? Show an example of how this works? What are the advantages of CIDR notation?
2. The Domain Name System (DNS) is a crucial component of the TCP/IP architecture. Answer the following questions about DNS.
   1. What is the purpose of DNS? Why is it used?
   2. Give some examples of domain names within organizations. Identify the components (levels) of a domain name. What do the different levels signify? Why do some domain names have more levels than others?
   3. Organizations may choose different DNS server architectures based on organization size, structure, and other contextual factors. Some organizations, for example, use only a single DNS server. Others may use multiple servers. Explain why this is the case. On what bases do organizations make this type of decision?
   4. Discuss the process of name resolution using DNS. Provide examples. Distinguish between iterative resolution and recursive resolution.
   5. What is DNS caching? DNS replication? Why are they used?
   6. DNS uses several different types of records. First, describe the contents of a basic DNS record (i.e., the data elements). Second, explain what is meant by each of the following DNS record types: type-A record, MX record, and CNAME record. Give examples of each type.

ISQA 8380 - MANAGING THE DISTRIBUTED COMPUTING ENVIRONMENT

1. Secure Events is a regional security company that provides security guards for area events such as concerts and large meetings. It is growing and needs to provide for more automation for their processes. Today, when off duty police officers want to sign up for events they must check the web site of Secure Events and then either send an email requesting an event or call a 1-800 number and request the event. In some cases they are overbooked since the web site today is only for posting information. Secure Events has contracted with a systems development and integration firm to automate many of the tasks done today by office staff at Secure Events. The key requirements for the system are listed below:
   • Potential security guards should be able to sign up at a web site to be a part of the part time staff pool of Secure Events. This sign up process should then send an email to the guard indicating that their potential employment will be reviewed. The system should then send their information to a background check firm and a motor vehicle report firm to check the status of these potential guards.
   • If they pass the background check and have a good driving record, they will then be sent another email saying they can sign up for possible event work. In the background, their information is then sent to an HR system so they can be paid.
   • The guards can then access the new scheduling system which will allow then to sign up at events in a real time fashion. Once all guards have been found for an event, it is shown as fully staffed. As soon as a guard shows they cannot be available, the event opens up so that others can now take the job.
   • Once the event takes place, the event coordinators indicate if the guards did show up and how well they performed. Based on that, the HR system then pays the guards. You are on a project team to develop this new system and integrate it with the existing systems at secure events. The systems involved include:
     1. The new, web based Secure Events sign up, event tracking and scheduling system. This is being developed in Java and will run on a JBOSS Java Application Server running on Linux and use an Oracle database.
     2. Email services will be provided by a Microsoft Exchange server.
     3. An HR system which is Peoplesoft HR. It uses an Oracle database and can communicate to other systems via files exchange and via web services.
     4. Background check: It is a mainframe based system that uses a 3270 interface. The mainframe is located at the background check company and employees at Secure Events access it through the internet using a VPN and terminal emulation on their PCs.
     5. Motor vehicle service. This is a company which collects motor vehicle reports on all people nationwide by working with local Department of Motor Vehicles. This system runs on a HP Minicomputer and uses Weblogic and is written in Java. You can communicate to the system via VPN to the MVR Check company through either a web service or MQ Series.
     6. Bank - the Peoplesoft system must transmit payroll information file to the bank using a VPN connection to their bank. The banking system is mainframe based CICS and DB2. You can interface through MQ series and file import/export.
   • Draw a diagram of how you would integrate these systems. Add the additional systems you need to accomplish the goals set out above for both call center representatives and for a new customer self service access. Don't forget about security. Be sure to show all firewalls needed to protect data for this system. Show the high level integration protocols on the arrows such as "web service" "odbc sql" etc…
   Describe how data moves from one system to another in a paragraph and defend your approach.
2. Three approaches to integrating transaction systems are messaging middleware (such as IBM MQ Series) database integration (using database middleware) and web services. Explain using diagrams how each of these forms of integration work and what standards may apply. Also explain when to use each of these forms of integration and when they are not appropriate for a systems integration project.

ISQA 8410 - DATABASE MANAGEMENT

1. You are to design a database to support a web site specializing in the sale of Asian art. Only the Title is a required field. In order to bid on or purchase a work of art, a user must first create an account, thus becoming a member. Only an e-mail address and a password need be created for the member. A member can negotiate with the artist for a price. A member can submit an offer for a piece of work through a form like that in Figure 2. If a bid is accepted by the artist, the bid is recorded as 'accepted'. Otherwise the bid is recorded as 'not accepted.' Each work of art is created by a single artist, but the artist may not be known for all works of art. However, each artist must be associated with at least one work of art. The system is to store the name and date of birth of each artist; his or her address, including country; professional degrees, and professional experiences/exhibits. For each degree, the system is to store the type of degree (e.g. Master of Fine Arts), the institution granting the degree, and the year granted. For each professional experience, the system is to store the year of the experience, the exhibit title, venu (location), and the country.

   Each member can create one or more "wishlists" of works of art that he or she might wish to acquire in the future. Figure 3 shows one wishlist, "My interests" and the single work of art in that wishlist. (To create a new wishlist, a user would type in the name of the new wishlist in the "Wish list names" field and click on "Add New".) Each wishlist may have zero or more works of art listed.

   Alternatively, a member may purchase one or more pieces of art for the listed price through an on-line transaction. The member collects works of art in the on-line shopping cart. For each such order, the system is to store the date of the order; a unique order identifier; billing and shipping addresses; a credit card number; the name and expiration date of the credit card number; and the quantity and price for each item ordered. Once a transaction has completed and the order shipped, the credit card numbers are purged from the system.

   1. Create a conceptual or logical data model for this scenario. Please feel free to make (and write down) any assumptions that do not contradict the text above.
   2. Design a set of appropriately normalized relations (tables) that is consistent with your data model. Choose one primary key that you created, and explain why your choice is a good one.
   3. Based on your tables, formulate SQL queries that will do the following:
      1. List each subject category (e.g. 'Flower') and the number of works are art that are classified into each subject category.
      2. List the title, year, and price of all works of art by Preeda Putthanametee that are in the 'Flower' category.
      3. For each artist, list the title, year, and price of that artist's oldest work.
      4. Create a view that list the title, artist, year of each work of art, and the number of wishlists on which that work appears.
2. Identify at least two major trends affecting the evolution of data and database management. For each trend, discuss the challenges to data management that each trend brings, and the kinds of solutions that may be brough to bear on the problem. Go into sufficient detail that it is clear that you have a solid grasp of the issues involved.

ISQA 8420 - MANAGING THE IS FUNCTION

1. You are the Information Systems Director for a medium manufacturing company. There are 100 persons in your IS organization and recently you have returned to centralized processing for the dispersed locations of the company.

   In order to grow, your company is considering purchasing another manufacturing firm that is in your same industry segment and is about the same size as your firm. There IS staff is smaller than yours and they have outsourced some of there IS functions. You have been selected to be a member of the due diligence team charged with assessing the utility of acquiring the other company and in determining a fair price to pay for the company.

   The due diligence team leader has requested that you and each member of the team develop questions you would ask the company you are considering acquiring. He has also asked that you justify or explain why you need answers to the questions you propose.

2. Your firm has fallen on hard times. As a result there have been several competitors who have approached your firm's management about a merger or a buy out.

   The president of your firm has asked that you develop a list of questions that a potential acquiring firm might ask about the IS function with a reason for each question. He asks you to target these questions at the CIO of the potential acquiring firm.

   You are to respond to the president's request.

ISQA 8810 - IT PROJECT FUNDAMENTALS

1. Is the critical path the path with the greatest cumulative risk? Explain your answer.
2. Define corrective action. List three examples of corrective action that could be used on a challenged project.