SME Consultant · LESSON 6

Management information systemsEqual subject marks; equal sampling here · 11 topics

Design systems, data and operation around business needs. Understand normalization to reduce redundancy and inconsistent updates. Restrict access by role and need, and test restoration rather than merely storing backups. SaaS appraisal includes migration, training and exit costs. AI retrieval must enforce authorization as well as relevance.

6.1Management information systems

Concept

Design systems, data and operation around business needs. Understand normalization to reduce redundancy and inconsistent updates. Restrict access by role and need, and test restoration rather than merely storing backups. SaaS appraisal includes migration, training and exit costs. AI retrieval must enforce authorization as well as relevance.

How it works / steps

  1. Normalization organizes relationships to reduce redundancy and update anomalies.
  2. Grant access according to role and need, and review it as responsibilities change.
  3. A backup alone does not demonstrate recovery; test restoration procedures and time.

Workplace example

For internal-policy RAG, constrain retrieval to the user’s permissions and test for cross-boundary document exposure.

Common confusions and exam tips

Reference links

6.2Computer architecture, performance and reliability

Concept

CPU, memory and storage serve different roles and operate at different speeds. Caches exploit locality. Availability is MTBF/(MTBF+MTTR), improved by fewer failures and faster recovery. Series/parallel reliability calculations require explicit assumptions such as independent failures.

How it works / steps

  1. 90/(90+10)=0.9; MTTR measures restoration time.
  2. Both must work, giving 0.9×0.9=0.81.
  3. Subtract the probability both fail: 1−0.1×0.1=0.99.

Workplace example

MTBF 90 hours and MTTR ten give 90% availability. Two independent 0.9 units give 0.81 if both are needed, or 0.99 if either suffices.

Common confusions and exam tips

Mini quiz

Q1. MTBF is 90 hours and MTTR ten. What is availability?

  1. 81%
  2. 90%
  3. 10%
  4. 99%
Show answer and explanation

Answer: B 90%

90/(90+10)=0.9; MTTR measures restoration time.

Q2. Two independent devices each have availability 0.9 and both are required. What is system availability?

  1. 0.81
  2. 0.99
  3. 0.90
  4. 0.18
Show answer and explanation

Answer: A 0.81

Both must work, giving 0.9×0.9=0.81.

Reference links

6.3Networks and internet protocols

Concept

IP routes traffic, TCP supports ordered reliable delivery, and DNS resolves names. TLS supports confidentiality and integrity in transit, not input correctness or endpoint safety. Distinguish bits per second from bytes: eight bits make one byte.

How it works / steps

  1. 100 MB is 800 megabits; 800/100=8 seconds.
  2. DNS resolves names; DHCP distributes address configuration to devices.
  3. TCP supports reliable ordered transport; TLS provides separate cryptographic functions.

Workplace example

Transferring 100 MB at 100 Mbps takes at least eight seconds theoretically, before overhead and congestion.

Common confusions and exam tips

Mini quiz

Q1. Transfer 100 MB over 100 Mbps, using decimal MB and ignoring overhead. How long?

  1. 100 seconds
  2. 0.125 seconds
  3. 8 seconds
  4. 1 second
Show answer and explanation

Answer: C 8 seconds

100 MB is 800 megabits; 800/100=8 seconds.

Q2. Which mechanism looks up IP addresses and related records for host names?

  1. FTP
  2. DNS
  3. DHCP
  4. SMTP
Show answer and explanation

Answer: B DNS

DNS resolves names; DHCP distributes address configuration to devices.

Reference links

6.4Relational databases, SQL and normalization

Concept

Primary keys identify rows and foreign keys support references. Normalization reduces redundancy and update anomalies through functional-dependency analysis. ACID covers atomicity, consistency, isolation and durability. WHERE filters rows; HAVING filters aggregated groups.

How it works / steps

  1. A primary key uniquely identifies rows and is non-null; foreign keys express references.
  2. Atomicity prevents partial completion; durability preserves committed results.
  3. HAVING filters aggregate groups; WHERE filters rows before aggregation.

Workplace example

Keeping customer details in a referenced customer table avoids inconsistent updates across many sales records.

Common confusions and exam tips

Mini quiz

Q1. Which constraint uniquely identifies each table row?

  1. Foreign key alone
  2. Sort order
  3. Display alias
  4. Primary key
Show answer and explanation

Answer: D Primary key

A primary key uniquely identifies rows and is non-null; foreign keys express references.

Q2. In ACID, what makes a transaction all-or-nothing?

  1. Durability
  2. Availability
  3. Atomicity
  4. Isolation
Show answer and explanation

Answer: C Atomicity

Atomicity prevents partial completion; durability preserves committed results.

Reference links

6.5Requirements, development and testing

Concept

Requirements include performance, availability, security and operations as well as functions. Choose sequential or iterative delivery according to uncertainty. Unit, integration, system and acceptance testing have different scopes and responsibilities; combine testing with reviews and static analysis.

How it works / steps

  1. It specifies service quality and performance rather than which business function is provided.
  2. Integration tests exercise interfaces and interactions among components.
  3. Short iterations generate evidence and feedback while retaining quality criteria and change decisions.

Workplace example

Translate “fast screens” into measurable conditions, such as 95% of responses within two seconds at defined load, with an agreed test environment.

Common confusions and exam tips

Mini quiz

Q1. “95% of responses within two seconds at peak load” is primarily what?

  1. A contractual payment method
  2. A nonfunctional performance requirement
  3. A revenue-posting function
  4. A customer-category data field
Show answer and explanation

Answer: B A nonfunctional performance requirement

It specifies service quality and performance rather than which business function is provided.

Q2. Which test checks connections and data exchange between modules?

  1. Integration testing
  2. Unit testing
  3. Only a desk code review
  4. Only user training
Show answer and explanation

Answer: A Integration testing

Integration tests exercise interfaces and interactions among components.

Reference links

6.6IT procurement, projects and service management

Concept

RFI gathers information and RFP requests proposals. Define contract responsibility, deliverables and acceptance. An SLA states agreed service levels. Incident management restores service, while problem management addresses underlying causes and recurrence.

How it works / steps

  1. It communicates requirements, constraints and evaluation conditions for comparable proposals.
  2. It agrees measures such as availability, response and support, including measurement and responsibility.
  3. It investigates causes and permanent prevention beyond immediate incident recovery.

Workplace example

For repeated outages, record the restart that restored service and separately track root cause and a permanent fix.

Common confusions and exam tips

Mini quiz

Q1. What is the main purpose of an RFP?

  1. Finalize internal cost of sales
  2. Only measure outage recovery time
  3. Only issue user identifiers
  4. Request proposals against requirements
Show answer and explanation

Answer: D Request proposals against requirements

It communicates requirements, constraints and evaluation conditions for comparable proposals.

Q2. What does an SLA define?

  1. All employee appraisal criteria
  2. Retail product price lists
  3. Agreed service levels
  4. Programming-language syntax
Show answer and explanation

Answer: C Agreed service levels

It agrees measures such as availability, response and support, including measurement and responsibility.

Reference links

6.7ERP, process redesign and architecture

Concept

ERP integrates processes and data to reduce fragmented duplicate entry. BPR fundamentally redesigns work rather than merely replacing screens. Plan shared master data, ownership, exceptions, migration and adoption so that automation does not simply reproduce waste.

How it works / steps

  1. Shared meanings, identifiers and ownership prevent integrated systems from retaining inconsistent data.
  2. BPR fundamentally redesigns processes around purpose and customer value.
  3. Compare process errors, duplication, time and customer outcomes against the baseline and intended goals.

Workplace example

If sales, inventory and accounting use conflicting customer IDs, define shared keys and master-data ownership before integration.

Common confusions and exam tips

Mini quiz

Q1. What supports integration through ERP?

  1. Permanently incompatible departmental codes
  2. Unconditional automation of every exception
  3. Skipping migration-data validation
  4. Shared master data and ownership
Show answer and explanation

Answer: D Shared master data and ownership

Shared meanings, identifiers and ownership prevent integrated systems from retaining inconsistent data.

Q2. Which illustrates BPR?

  1. Adding duplicate entries for every department
  2. Automating without reconsidering the process
  3. Redesigning approvals from their purpose
  4. Copying paper forms directly to screens
Show answer and explanation

Answer: C Redesigning approvals from their purpose

BPR fundamentally redesigns processes around purpose and customer value.

Reference links

6.8Cloud, virtualization and APIs

Concept

IaaS provides infrastructure, PaaS an application platform, and SaaS a ready application. Responsibilities vary by service and contract. APIs need authentication, authorization, limits and compatibility management. Variable charges can grow with usage, so compare total ownership cost.

How it works / steps

  1. SaaS delivers application functionality; IaaS provides infrastructure and PaaS a platform.
  2. Compare initial, usage, staff, data migration and exit costs over the lifecycle.
  3. Authentication identifies the caller; authorization determines permitted actions and data.

Workplace example

Even with accounting SaaS, the customer must assess user access, data quality, export and exit arrangements.

Common confusions and exam tips

Mini quiz

Q1. A customer uses a ready-made accounting application online. What service model is this?

  1. Dedicated on-premises hardware
  2. SaaS
  3. IaaS
  4. PaaS
Show answer and explanation

Answer: B SaaS

SaaS delivers application functionality; IaaS provides infrastructure and PaaS a platform.

Q2. What should cloud TCO include?

  1. Migration, operation, transfer and exit costs
  2. Only the base monthly fee
  3. Only first-year hardware purchases
  4. Only an introductory seminar fee
Show answer and explanation

Answer: A Migration, operation, transfer and exit costs

Compare initial, usage, staff, data migration and exit costs over the lifecycle.

Reference links

6.9Security, cryptography and authentication

Concept

Protect confidentiality, integrity and availability with access control, encryption, backups, monitoring and education. Symmetric and asymmetric cryptography have different key-distribution properties. Digital signatures use a private key to sign and a public key to verify; hashes are not reversible encryption.

How it works / steps

  1. The private key signs and the corresponding public key verifies. Distinguish signing from encryption.
  2. Knowledge plus possession are distinct factors; multiple knowledge secrets alone are not.
  3. Recoverable copies must resist the same attack and be tested through actual restoration.

Workplace example

Combining a password with a possession factor is multifactor authentication; entering two passwords is not two different factor types.

Common confusions and exam tips

Mini quiz

Q1. Which key creates a digital signature?

  1. The signer’s private key
  2. The signer’s public key
  3. Only the verifier’s public key
  4. A shared public password
Show answer and explanation

Answer: A The signer’s private key

The private key signs and the corresponding public key verifies. Distinguish signing from encryption.

Q2. Which uses different authentication factors?

  1. Entering two different passwords
  2. Reentering the same secret
  3. Answering only two security questions
  4. Password plus a possession-device check
Show answer and explanation

Answer: D Password plus a possession-device check

Knowledge plus possession are distinct factors; multiple knowledge secrets alone are not.

Reference links

6.10Statistics, analytics and AI

Concept

Means and medians differ in sensitivity to outliers. Correlation does not prove causality, and leakage inflates validation performance. For classifiers, precision=TP/(TP+FP), recall=TP/(TP+FN). Select metrics based on the costs of false alarms and missed positives.

How it works / steps

  1. TP/(TP+FP)=30/40=75%; recall is 30/50=60%.
  2. TP/(TP+FN)=30/50=60%, the share of actual positives detected.
  3. The middle ordered observation is three; the mean of 22 is pulled upward by 100.

Workplace example

With TP30, FP10 and FN20, precision is 75% and recall 60%. Overall accuracy alone can hide performance on rare fraud.

Common confusions and exam tips

Mini quiz

Q1. TP=30, FP=10 and FN=20. What is precision?

  1. 60%
  2. 50%
  3. 40%
  4. 75%
Show answer and explanation

Answer: D 75%

TP/(TP+FP)=30/40=75%; recall is 30/50=60%.

Q2. TP=30, FP=10 and FN=20. What is recall?

  1. 40%
  2. 50%
  3. 60%
  4. 75%
Show answer and explanation

Answer: C 60%

TP/(TP+FN)=30/50=60%, the share of actual positives detected.

Reference links

6.11IT controls, audit and business continuity

Concept

IT controls include approvals, separation of duties, change records and access control. Audit assesses evidence independently. BCP addresses business continuity and restoration. RTO is target restoration time; RPO defines the acceptable point of data loss.

How it works / steps

  1. RTO sets how soon service must recover; RPO addresses data age.
  2. It defines the recoverable data point, not the restoration duration.
  3. Separate request, approval and implementation, or add review, to reduce unilateral improper changes.

Workplace example

RTO four hours and RPO one hour call for restoration within four hours and at most one hour’s data loss as design objectives.

Common confusions and exam tips

Mini quiz

Q1. What does RTO primarily specify?

  1. Mean time between failures
  2. Return on investment
  3. Target recovery duration
  4. Acceptable data-loss point
Show answer and explanation

Answer: C Target recovery duration

RTO sets how soon service must recover; RPO addresses data age.

Q2. What does an RPO of one hour mean?

  1. Audit the system every hour
  2. Limit data loss to at most one hour
  3. All operations must restart within one hour
  4. Allow only one outage hour per year
Show answer and explanation

Answer: B Limit data loss to at most one hour

It defines the recoverable data point, not the restoration duration.

Reference links

Lessons are written by this site based on public information and do not guarantee exam content. Product specifications change, so check the latest information at the reference links.

Notes (unofficial, original questions, no pass guarantee)