CITM-001 Practice Exam Questions with Answers Certified Information Technology Manager (CITM) Certification

A worm is a type of malicious code that can distribute itself without using having to attach to a host file. Unlike a virus, which needs to infect an existing program or file to spread, a worm can create copies of itself and send them to other devices through a network. A worm can consume network bandwidth, slow down the system performance, or deliver a payload that can damage or compromise the security of the infected device. According to the CITM study guide, a worm is “a self-replicating program that does not alter files but resides in active memory and duplicates itself” (p. 70). Some examples of worms are Stuxnet, Conficker, and Blaster. References:

• CITM Study Guide, Chapter 5: Information Security, pp. 69-71
• 12 Types of Malware + Examples That You Should Know1
• What is Malicious code?2
• Cyber Awareness Challenge 2022 Malicious Code3
• Malicious Code—What is it and How to Prevent it?4

A field is a unit of data that can store one or more characters, such as a name, a date, or a number. Fields are used to organize and store data in databases, spreadsheets, and other applications. A byte is a unit of digital information that consists of eight bits, which are binary digits that can have two values: 0 or 1. An octet is another term for a byte, especially in the context of network protocols and data transmission. A decimal is a number system that uses ten symbols: 0, 1, 2, 3, 4, 5, 6, 7, 8, and 9. Decimals can also have a decimal point to represent fractions, such as 3.14 or 0.25. References: Certified IT Manager (CITM) Course Outline, Grouping Symbols and Order of Operations, A group of characters is called as a

Managerial control decisions are those that involve measuring and correcting the performance of activities of subordinates to ensure that the enterprise objectives and plans are being accomplished. Managerial control decisions fall between operational and strategic planning because they are concerned with both executing the strategy and tracking its progress. Operational control decisions are those that focus on the efficiency and effectiveness of specific processes, tasks, and functions. Strategic control decisions are those that evaluate the alignment of the strategy with the external and internal environment, and make adjustments if necessary. References: Managerial Control: Definition, Features, Scope, and Process, Types and Levels of Control – Principles of Management, The Control Function of Management - MIT Sloan Management Review

When deciding on system alternatives, the IT manager has to consider the following points1:

• Technological feasibility: The IT manager has to assess whether the proposed system can be implemented with the available technology, resources, and skills. The IT manager has to evaluate the technical risks, challenges, and benefits of each alternative.
• Organizational impact: The IT manager has to analyze how the proposed system will affect the organization’s structure, culture, processes, and performance. The IT manager has to consider the stakeholders’ needs, expectations, and resistance to change. The IT manager has to ensure that the system aligns with the organization’s vision, mission, and goals.
• Financial constraints: The IT manager has to estimate the costs and benefits of each alternative, including the initial investment, operating expenses, maintenance costs, and return on investment. The IT manager has to compare the alternatives based on their financial viability and value for money. The IT manager has to secure the necessary funding and budget for the system. References: 1: EXIN EPI Certified InformationTechnology Manager, Module 6: IT Project Management, Section 6.3: System Analysis and Design, Page 6-11.

 Classes are a representation of some real-world thing and a number of specific instances of that thing. Classes define the common characteristics and behaviors of a group of objects, such as properties, methods, and events. Objects are individual instances of classes that can have different values for the properties and variables defined by the class. Procedures are blocks of code that perform a specific task or function. Links are connections between objects that allow communication and interaction. References: Objects and Classes – Programming Fundamentals, Objects and classes - Visual Basic, Object-Oriented Programming: Objects, Classes & Methods

Lower level management, also known as supervisory or operational management, is the lowest tier of the managerial hierarchy. It consists of managers who oversee the work of employees and report to middle level managers. Lower level managers can make use of the managerial hierarchy to obtain approvals or additional guidance from their superiors when they face problems or challenges that are beyond their authority or expertise. The managerial hierarchy also helps lower level managers to communicate and coordinate with other managers and departments within the organization. References: 3, CITM Study Guide, Chapter 2: Organizational Structure and Design, Section 2.1: Types of Organizational Structures, Page 18.

The conceptual level is a high-level description of the data and its relationships in the database, without specifying how the data is physically stored or implemented. It defines the main entities, attributes, and constraints for the entire database, and is independent of any specific database management system or application. The conceptual level is also known as the logical level, and it is usually represented by an entity-relationship diagram (ERD). References: Conceptual schema - Wikipedia, Navigating the Three Levels of Database Design: Conceptual, Logical, and Physical

 Distributed databases provide several advantages over centralized databases, including improved scalability, availability, performance, flexibility, fault tolerance, and security1. Here are some of the advantages of distributed databases:

• Increased availability: Distributed databases can tolerate failures of individual nodes or sites without affecting the overall system functionality. Users can access data from other sites if their local site is down or unreachable. Data replication and backup mechanisms can also enhance data availability and recovery2.
• Easier expansion: Distributed databases can be scaled horizontally by adding more nodes to the network. This allows for increased capacity and performance as data and user demand grow. Adding new sites or units to the distributed system does not require significant efforts or disruption in the existing functions2.
• Improved performance: Distributed databases can offer faster response and lower communication costs by locating data near the users who normally use that data. Distributed query processing and transaction management can also optimize the use of network and computing resources. Furthermore, distributed databases can exploit the parallelism of multiple nodes to execute operations concurrently13.

References: What Is a Distributed Database? {Features, Benefits & Drawbacks}, Advantage and Disadvantage of Distributed Database Management System (DDBMS) - Bench Partner, Advantages of Distributed database - GeeksforGeeks

 Object-oriented analysis (OOA) is the first technical activity performed as part of object-oriented software engineering. OOA involves modeling the problem domain using objects and their interactions. According to the CITM study guide, there are five steps involved to undertake an object-oriented analysis1:

• Find and define the objects
• Organize the objects
• Describe how the objects interact with one another
• Define the external behavior of the objects
• Define the internal behavior of the objects References: 1: CITM Study Guide, Chapter 4: Object-Oriented Analysis and Design, Page 63-64.

Global information systems are information systems that span multiple countries, cultures, and organizations. They enable the sharing of data, knowledge, and resources across borders and regions. However, limited access to high speed internet may impede the development of global information systems, as it affects the quality, speed, reliability, and security of communication and collaboration. According to the International Telecommunication Union (ITU), in 2020, only 51.4% of the world’s population had access to the internet, and only 19.1% had fixed broadband subscriptions1. This means that many people and regions are still digitally excluded or underserved, especially in developing countries and rural areas. This digital divide may create challenges and barriers for the design, implementation, and management of global information systems, such as:

• Lack of infrastructure and resources: Developing and maintaining global information systems requires adequate and stable infrastructure and resources, such as servers, routers, cables, satellites, power supply, bandwidth, etc. However, many regions lack the necessary infrastructure and resources to support high speed internet access, or face high costs and risks of disruption or damage2. This may limit the availability, performance, and scalability of global information systems, and increase the complexity and cost of their development and maintenance.
• Lack of interoperability and standardization: Global information systems need to ensure interoperability and standardization among different systems, platforms, protocols, formats, and languages. However, limited access to high speed internet may hinder the adoption and integration of common standards and technologies, such as cloud computing, web services, APIs, etc. This may result in compatibility issues, data inconsistency, and inefficiency of global information systems, and require more effort and coordination to achieve interoperability and standardization3.
• Lack of user participation and satisfaction: Global information systems need to consider the needs, preferences, and expectations of diverse and distributed users and stakeholders. However, limited access to high speed internet may affect the userparticipation and satisfaction of global information systems, as it may reduce the usability, accessibility, and functionality of the systems, and cause delays, errors, or failures of communication and collaboration. This may lead to user frustration, dissatisfaction, and resistance, and lower the adoption and acceptance of global information systems.

References: Measuring digital development: Facts and figures 2020, Challenges and Opportunities of Global Information Systems Development: A Comparative Analysis, Global Information Systems: Challenges and Opportunities, [The Impact of Internet Speed on Online User Behaviour and Satisfaction]

Dropbox is a cloud-based file sharing application that allows users to store, sync, and share documents, photos, videos, and other files across multiple devices. Users can access their files from any web browser, desktop app, or mobile app, and share them with others via links or folders. Dropbox also offers security features such as encryption, password protection, and remote wipe. References: File sharing - Easily share files, documents, and links - Dropbox, Best file sharing apps in 2024 | Tom’s Guide

Information can be defined as data that has been processed or organized in a meaningful way that reduces uncertainty. Information can be either tangible or intangible, depending on whether it has a physical form or not. For example, a printed report is tangible information, while an email is intangible information. Information can also be static or dynamic, depending on whether it changes over time or not. For example, a historical record is static information, while a stock price is dynamic information. However, the question asks for the two entities that define information, not the two attributes that describe information. Therefore, the correct answer is A and B, tangible and intangible. References: Sample Exam - GAQM, page 2, question 6.

Whatsup is an application software that allows users to send text messages, voice messages, make voice and video calls, and share images, documents, user locations, and other media. Whatsup is a cross-platform instant messaging subscription because it works on different operating systems such as Android, iOS, Windows Phone, and KaiOS, and it requires users to pay a yearly fee after the first year of use. Whatsup uses the user’s phone number as the primary identifier and encrypts all communication end-to-end. References: Whatsup - Wikipedia, Whatsup FAQ - About Whatsup, Whatsup FAQ - How to verify your number, Whatsup FAQ - How to access your messages and media.

 In a database, each row represents a single, implicitly structured data item in a table. A row is also called a record or a tuple. A record contains multiple fields, each one defined in a different column. A field is the intersection of a row and a column, and it holds a single value. A column is also called an attribute or a field name, and it defines the type and constraints of the data in that column. References:

https://stackoverflow.com/questions/13774547/in-databases-whats-the-difference-between-the-words-row-and-record

https://database.guide/what-is-a-row/

Tangible costs are those that can be easily quantified and measured, such as direct expenses or physical assets. However, in some cases, tangible costs savings can be difficult to estimatebecause they depend on various factors, such as the expected life cycle of the asset, the depreciation rate, the maintenance costs, the opportunity costs, and the market conditions. For example, if a company invests in a new production machine, the tangible cost savings would be the difference between the cost of the old machine and the cost of the new machine, plus the additional benefits of the new machine, such as higher output, lower energy consumption, and improved quality. However, these benefits may not be easy to measure or predict, especially in the long term. Therefore, tangible costs savings can be difficult to estimate in some cases. References: Tangible Cost: Meaning and Difference From Intangible Costs - Investopedia, What Are Tangible Costs? (Plus Why They Matter and Examples) | Indeed.com, Intangible Cost vs. Tangible Cost - What’s the Difference? | This vs. That, Project tangible and intangible benefits - Twproject: project management software

The second step in System Analysis is to conduct a feasibility study, which is an assessment of the technical, economic, legal, operational, and schedule aspects of the proposed system. A feasibility study helps to determine whether the system is viable, beneficial, and achievable within the given constraints and resources. A feasibility study also helps to identify the risks, costs, benefits, and alternatives of the system. References: 1, 2, 3

1: Certified IT Manager (CITM) Course Outline, EPI-AP, page 9 2: System Analysis vs System Design - What are the Differences?, GeeksforGeeks, section “Differences between System Analysis and System Design” 3: Step Response of Second Order System - Online Tutorials Library, TutorialsPoint, section “Follow these steps to get the response (output) of the second order system in the time domain.”

A client-server environment is a type of distributed system that divides the application logic into three layers: presentation, application, and data. The presentation layer is responsible for the user interface and interaction, the application layer contains the business logic and functionality, and the data layer manages the storage and retrieval of data. Each layer can run on a different machine or server, allowing for scalability, modularity, and security1234 References:

• 1: Client Server Architecture: Types, Examples, & Benefits
• 2: Client-Server Model - GeeksforGeeks
• 3: What is Three-Tier Architecture | IBM
• 4: Figure 1. The Client/Server Computing Environment - IBM

An ER diagram (Entity-Relationship diagram) is a type of diagram that consists of object types and relationships. An object type is a category of objects that share common attributes and behaviors, such as a class, an entity, or a component. A relationship is a connection or association between two or more object types, such as an inheritance, an aggregation, or a dependency. An ER diagram is used to model the structure and semantics of a system, such as a database, a software system, or a business domain. An ER diagram can show the cardinality, optionality, and constraints of the relationships, as well as the attributes and operations of the object types. References: What is an Entity Relationship Diagram (ERD)?, Object Diagrams | Unified Modeling Language (UML), The Easy Guide to UML Class Diagrams | Class Diagram Tutorial, Class diagrams vs Object diagrams in UML

An attribute is a property that describes various characteristics of an entity. For example, an entity type called Employee may have attributes such as name, age, salary, department, etc. An attribute can also be a primary key that uniquely identifies an entity instance, or a foreign key that references another entity type. An attribute can have a data type, a domain, and a constraint that define its format, range, and validity. An attribute is represented by an oval in an ER diagram, and by a column in a table. References: 3, EXIN EPI Certified Information Technology Manager - EXIN (page 23)