CITM-001 Certified Information Technology Manager (CITM) Questions and Answers

 Sequential interdependence occurs when the output of one unit or group becomes the input for another. This type of interdependence requires coordination and communication among the units or groups involved, as any delay or error in one unit can affect the performance of the next unit. An example of sequential interdependence is an assembly line, where each stage of production depends on the previous one12 References:

• 1: 9.4 Intergroup Behavior and Performance - OpenStax
• 2: Three Types of Interdependence in an Organizational Structure | Small Business - Chron.com

According to the CITM course outline1, there are five data collection techniques that are commonly used in business analytics. They are:

• Observations: This technique involves watching and recording the behavior, actions, or events of interest. Observations can be either direct or indirect, structured or unstructured, participant or non-participant.
• Interviews: This technique involves asking questions to individuals or groups of people who have relevant knowledge or experience on the topic. Interviews can be either structured, semi-structured, or unstructured, depending on the level of flexibility and standardization of the questions.
• Surveys: This technique involves administering a set of questions to a sample of respondents who represent the population of interest. Surveys can be either quantitative or qualitative, depending on the type and scale of the questions.
• Focus groups: This technique involves gathering a small group of people who share some common characteristics or opinions on the topic and facilitating a discussion among them. Focus groups can be used to explore attitudes, perceptions, feelings, or preferences of the participants.
• Documents: This technique involves reviewing and analyzing existing documents or records that are relevant to the topic. Documents can be either primary or secondary, depending on the source and authenticity of the information.

References:

• 1: 7 Data Collection Methods and Techniques | SafetyCulture
• 2: CITM 500 Data and Information Management | The Chang School of Continuing Education - Toronto Metropolitan University
• 3: Data Collection Methods | Step-by-Step Guide & Examples - Scribbr
• 4: Data Collection - Methods Types and Examples - Research Method

Development cost is the type of cost that is considered as actual costs of analysis, design, and installation for the system. Development cost includes the expenses incurred during the planning, designing, building, testing, and deploying of a system. Development cost is usually estimated before the start of a project and is used to measure the feasibility and profitability of a system. Development cost is also used to monitor the progress and performance of a project and to control the scope and quality of a system. References: CITM Course Outline, Module 4, Corporate IT Strategy, page 9. CITM Training Course, Cost, page 14. CITM Certification Overview, Exam Information, Course Outline, Module 4.

A decompiler is a program that translates from a low-level language to a higher level one. A low-level language is one that is close to the machine code, such as assembly or binary. A higher level language is one that is more abstract and human-readable, such as C++ or Java. A decompiler can reverse-engineer the source code from an executable file, which can be useful for debugging, analysis, or modification purposes. However, decompilation is not always possible or accurate, as some information may be lost or obfuscated during the compilation process12. References: 1: What is a compiler? How source code becomes machine code12: How does an interpreter/compiler work2

A worm is a type of malicious code that can distribute itself without using having to attach to a host file. Unlike a virus, which needs to infect an existing program or file to spread, a worm can create copies of itself and send them to other devices through a network. A worm can consume network bandwidth, slow down the system performance, or deliver a payload that can damage or compromise the security of the infected device. According to the CITM study guide, a worm is “a self-replicating program that does not alter files but resides in active memory and duplicates itself” (p. 70). Some examples of worms are Stuxnet, Conficker, and Blaster. References:

• CITM Study Guide, Chapter 5: Information Security, pp. 69-71
• 12 Types of Malware + Examples That You Should Know1
• What is Malicious code?2
• Cyber Awareness Challenge 2022 Malicious Code3
• Malicious Code—What is it and How to Prevent it?4

Restrictions on Internet access and efforts to censor web sites may impede the development of a global information system by limiting the availability, diversity, and quality of information that can be accessed and shared across borders. Such restrictions may also hamper the innovation, collaboration, and communication that are essential for the advancement of technology, science, and society. According to the CITM study guide, a global information system is “a system that collects, processes, stores, and disseminates information that is relevant to the needs of users in different countries” (p. 26). The benefits of a global information system include “improved decision making, enhanced coordination, increased efficiency, reduced costs, and greater customer satisfaction” (p. 26). However, these benefits can be undermined by various forms of internet censorship, such as:

• Manipulating search results to favor certain sources or viewpoints, or to hide or distort information that is unfavorable to the censoring authority.
• Blocking access to specific sites or domains that contain information that is deemed illegal, immoral, or politically sensitive by the censoring authority.
• Shutting off internet access altogether or imposing bandwidth limitations during times of crisis, protest, or conflict to prevent the dissemination of information that could challenge the status quo or mobilize opposition.
• Requiring users to register or obtain licenses to access certain sites or services, or to use encryption or VPNs, which can deter or restrict internet usage and expose users to surveillance or prosecution.
• Monitoring, filtering, or deleting online content or communications that are considered harmful, offensive, or subversive by the censoring authority, or imposing self-censorship through legal or social pressure.

These forms of internet censorship can have negative impacts on the development of a global information system, such as:

• Reducing the amount and variety of information that is available to users in different countries, which can limit their knowledge, awareness, and understanding of global issues and perspectives.
• Lowering the quality and reliability of information that is available to users in different countries, which can impair their ability to make informed and rational decisions, or to verify and challenge the information they receive.
• Restricting the opportunities and platforms for users in different countries to exchange and share information, ideas, opinions, and feedback, which can hinder their collaboration, innovation, and creativity.
• Violating the rights and freedoms of users in different countries to access and express information, which can undermine their participation, representation, and empowerment in the global society.

References:

• CITM Study Guide, Chapter 2: Global Information Systems, pp. 25-32
• Internet Censorship in 2024: The Impact of Internet Restrictions1
• Internet Censorship 2024: A Global Map of Internet Restrictions2
• Internet Censorship: Definition, Types, & How It Can Affect You3
• How Countries Censor and Control the Internet4

According to the Certified IT Manager (CITM) course outline, there are nine stages in a systems design life-cycle. They are: 1. Initiation, 2. Concept Development, 3. Planning, 4. Requirements Analysis, 5. Design, 6. Development, 7. Integration and Test, 8. Implementation, and 9.Operations and Maintenance. Each stage has its own objectives, deliverables, and activities that ensure a systematic and effective approach to system development. References: CITM Course Outline, System Development Life Cycle - GeeksforGeeks, Systems development life cycle - Wikipedia

According to the CITM certification, there are six trends that have drastically altered the way organizations use technology. These are:

• Cloud computing: The delivery of computing services over the internet, such as servers, storage, databases, networking, software, analytics, and intelligence. Cloud computing enables organizations to access scalable, flexible, and cost-effective IT resources on demand.
• Big data and analytics: The collection, processing, and analysis of large and complex data sets to generate insights and value. Big data and analytics enable organizations to improve decision making, optimize operations, enhance customer experience, and create new products and services.
• Social media and collaboration: The use of online platforms and tools to communicate, share, and interact with others. Social media and collaboration enable organizations to engage with customers, employees, partners, and stakeholders, as well as to foster innovation and knowledge sharing.
• Mobile and wireless: The use of devices and networks that allow users to access information and services anytime and anywhere. Mobile and wireless enable organizations to extend their reach, improve productivity, and offer convenience and personalization.
• Internet of things (IoT): The network of physical objects that are embedded with sensors, software, and other technologies to connect and exchange data with other devices and systems. IoT enables organizations to monitor and control their assets, processes, and environments, as well as to create new business models and opportunities.
• Cybersecurity: The protection of information systems and data from unauthorized access, use, disclosure, modification, or destruction. Cybersecurity enables organizations to safeguard their assets, reputation, and trust, as well as to comply with laws and regulations.

References:

• CITM certification, page 9
• McKinsey Technology Trends Outlook 2023
• Here’s how technology has changed the world since 2000
• 10 Ways Technology Has Reshaped the Modern Workplace

 An Integrated Global IT approach is a strategy that aims to align the IT functions and capabilities of a firm with its global business objectives and needs. One of the benefits of this approach is that it enables the firm to provide more consistent customer service internationally, by leveraging common platforms, standards, processes, and data across different regions and markets. This can enhance customer satisfaction, loyalty, and retention, as well as reduce costs and risks associated with IT fragmentation and duplication. References: Integrated Global IT approach customer service, Toward an integrated technology operating model, Managing Global Customers: An Integrated Approach, Five steps to an integrated customer experience

A logic bomb is a type of malicious code that is inserted into a software program and remains dormant until a specific condition or event occurs, such as a certain date, time, or user action. When the condition is met, the logic bomb activates and executes its harmful payload, which can range from deleting or corrupting data, to displaying unwanted messages, to crashing the system. Logic bombs are often used by disgruntled employees or hackers to sabotage an organization’s IT infrastructure or to extort money or information. Logic bombs are different from keyloggers, spam, and viruses, which are explained below:

• A keylogger is a software or hardware device that records every keystroke made by a user on a computer or mobile device, usually for the purpose of stealing passwords, personal information, or other sensitive data. Keyloggers can be installed by hackers through phishing, trojan viruses, or physical access to the device. Keyloggers do not wait for a specific condition to activate, but rather run continuously in the background and transmit the captured data to a remote server or storage device.
• Spam is any kind of unwanted, unsolicited, or irrelevant digital communication that is sent or posted to a large number of recipients or places, typically for the purposes of advertising, phishing, spreading malware, or disrupting normal operations. Spam can be delivered via email,text message, phone call, or social media. Spam does not contain hidden code that executes a harmful action, but rather relies on the user’s response or interaction to achieve its goal, such as clicking a link, opening an attachment, or providing personal information.
• A virus is a type of malware that infects a computer or mobile device by attaching itself to another program or file and replicating itself when the host program or file is executed. A virus can have various harmful effects, such as deleting or modifying data, consuming system resources, displaying unwanted messages, or opening backdoors for hackers. A virus can spread from one device to another through networks, removable media, or email attachments. A virus does not require a specific condition to activate, but rather runs whenever the infected program or file is executed.

References:

• Logic Bomb Definition & Meaning - Merriam-Webster
• What is a Keylogger? How to Detect a Keylogger? - Fortinet
• Spam | What is Spam? | Definition & Types of Spam
• Virus | Definition, Structure, & Facts | Britannica

Application software is a type of computer program that performs a specific personal, educational, or business function. It is designed to help users perform an activity or solve a problem. Application software can be classified into two basic categories: general-purpose and specific-purpose. General-purpose application software can be used for a variety of tasks, such as word processing, web browsing, or image editing. Specific-purpose application software is tailored for a particular domain, such as accounting, engineering, or gaming12

According to these definitions, Adobe Photoshop, Internet Explorer, and Microsoft Word are examples of application software. Adobe Photoshop is an image editing software that allows users to create and modify digital images. Internet Explorer is a web browser software that enables users to access and view web pages. Microsoft Word is a word processor software that allows users to create and edit text documents. All these software are designed to help users perform specific tasks and are independent of the operating system or hardware.

On the other hand, Linux and Unix are not examples of application software. They are examples of system software, which is a type of computer program that controls and manages the operation of the computer and its peripherals. System software includes operating systems, device drivers, firmware, and utilities. Operating systems, such asLinux and Unix, are system software that provide the basic functions and services for running other software and applications. They are responsible for managing the hardware resources, such as memory, CPU, disk, and network, and providing the user interface, such as command-line or graphical. System software is essential for the functioning of the computer and is usually pre-installed or embedded in the computer123 References: 1: Application software | Definition, Examples, & Facts | Britannica, 2: What is Application Software? App Software Examples and Basics - Quickbase, 3: Application software - Wikipedia

 A relation is a type of association that describes how two or more entities are related to each other. A relation can have different properties, such as cardinality, optionality, and directionality, that specify the nature and constraints of the association. A relation can also have attributes that store information about the association. For example, a relation between Employee and Project entities can have an attribute called Role that indicates the role of each employee in each project. A relation can be represented by a line connecting the entities in an entity-relationship diagram (ERD). References: Association and Associative entity - IBM, When to use Associative entities? - Stack Overflow, [Entity-Relationship Model - Tutorialspoint].

In a multi-user design, one group usually develops the systems for use by another group. This is because different groups of users may have different needs, preferences, and expectations for the system. For example, a system that is designed for the accounting department may not be suitable for the marketing department, or a system that is designed for the managers may not be user-friendly for the employees. Therefore, a multi-user design involves identifying the target users, analyzing their requirements, designing the system accordingly, and testing the system with the users. A multi-user design also requires coordination and communication among the developers and the users, as well as among different user groups, to ensure that the system meets the needs and expectations of all stakeholders. References: Multi-User Operating System - GeeksforGeeks; Multiple Group Design: Definition & Examples - Study.com; Chapter 10: Information Systems Development

In object-oriented approach, a program is composed of classes and objects that interact with each other through messages. A class is a blueprint that defines the attributes and behaviors of a group of similar objects. An object is an instance of a class that has its own state and canperform actions defined by the class. Objects can be related to each other through different types of relationships, such as inheritance, association, aggregation, and composition. Object-oriented approach aims to model the real-world entities and problems in terms of objects and their interactions, making the program more modular, reusable, and maintainable. References: Object Oriented Approach - Online Tutorials Library, What is object-oriented programming? OOP explained in depth - Educative, Object-oriented programming - Wikipedia

 In a database, each row represents a single, implicitly structured data item in a table. A row is also called a record or a tuple. A record contains multiple fields, each one defined in a different column. A field is the intersection of a row and a column, and it holds a single value. A column is also called an attribute or a field name, and it defines the type and constraints of the data in that column. References:

https://stackoverflow.com/questions/13774547/in-databases-whats-the-difference-between-the-words-row-and-record

https://database.guide/what-is-a-row/

Managerial control is the process of ensuring that the organization’s activities and outputs are aligned with its goals and plans. Coordination is the process of integrating the efforts of different units and individuals within the organization to achieve a common purpose. Both control and coordination are essential functions of management that aim to improve the performance and efficiency of the organization. They are closely related because they both involve setting standards, measuring performance, and taking corrective actions. They also both require communication, feedback, and cooperation among the managers and employees12345 References:

• 1: The Control Function of Management - MIT Sloan Management Review
• 2: Managerial Control | Definition, Types & Features - Study.com
• 3: Relationship between planning and controlling - Management Study Guide
• 4: Question Bank - Multiple Choice Questions (MCQs) - DACC
• 5: 4 Different Relationship between Planning and Control Expalined - Toppr

A byte is the smallest unit of data storage that consists of eight bits. A bit is a binary digit that can have two values: 0 or 1. A byte can store one character, such as a letter, a number, or a symbol. An octet is another name for a byte, but it is not commonly used. A character is a symbol that represents a letter, a digit, or a punctuation mark, but it is not a unit of data storage. A field is a group of bytes that stores a specific type of data, such as a name, a date, or a number, but it is not the smallest unit of data storage. References: Data Storage Units of Measurement Table, What are the units of measurements for data storage?, Data Storage Units

Tacit knowledge is the knowledge that is acquired from one’s own experience, which cannot be easily expressed through words or pictures. It is personal, subjective, and based on intuition and insights. It is difficult to explain because it is often implicit, uncodified, and context-specific. Examples of tacit knowledge include facial recognition, riding a bike, or playing a musical instrument. References: Tacit Knowledge Vs. Explicit Knowledge, Difference Between Explicit Knowledge and Tacit Knowledge, Tacit vs explicit knowledge: Exploring the key differences, Different Types of Knowledge: Implicit, Tacit, and Explicit, Explicit Knowledge: Definition, Examples, and Methods

Conversion is the process of changing the existing system to the new system. It involves transferring data, installing hardware and software, training users, and decommissioning the old system. Conversion is the ninth step in the Systems Design Life Cycle, according to the CITM study guide1 References: 1 CITM Study Guide, Chapter 4: System Development Life Cycle, page 4-14.

An analytic decision maker looks for quantitative information, or data that can be counted or measured in numerical values. An analytic decision maker uses logic, facts, and statistics to make decisions, and prefers objective and structured data. A heuristic decision maker, on the other hand, looks for qualitative information, or data that is descriptive and not expressed numerically. A heuristic decision maker uses intuition, experience, and judgment to make decisions, and prefers subjective and unstructured data. References: CITM Study Guide, page 8, section 2.3; What is Quantitative Data?, paragraph 2.

Explicit knowledge is the type of knowledge that can be easily articulated, expressed, and recorded in the form of text, number, symbol, code, formula, or musical note. It is the knowledge that is based on facts, data, and rules that can be shared and communicated. Examples of explicit knowledge are company policies, process documents, research reports, etc12345 References:

• 1: Different Types of Knowledge: Implicit, Tacit, and Explicit | Bloomfire
• 2: Tacit Knowledge Vs. Explicit Knowledge - Association for Intelligent Information Management
• 3: Tacit Knowledge: Definition, Examples, and Importance - Helpjuice
• 4: Explicit Knowledge: Definition, Examples, and Methods - Document360
• 5: Difference Between Explicit Knowledge and Tacit Knowledge - Key Differences