SME Consultant · LESSON 6
Management information systemsEqual subject marks; equal sampling here · 11 topics
Design systems, data and operation around business needs. Understand normalization to reduce redundancy and inconsistent updates. Restrict access by role and need, and test restoration rather than merely storing backups. SaaS appraisal includes migration, training and exit costs. AI retrieval must enforce authorization as well as relevance.
6.1Management information systems
Concept
Design systems, data and operation around business needs. Understand normalization to reduce redundancy and inconsistent updates. Restrict access by role and need, and test restoration rather than merely storing backups. SaaS appraisal includes migration, training and exit costs. AI retrieval must enforce authorization as well as relevance.
How it works / steps
- Normalization organizes relationships to reduce redundancy and update anomalies.
- Grant access according to role and need, and review it as responsibilities change.
- A backup alone does not demonstrate recovery; test restoration procedures and time.
Workplace example
For internal-policy RAG, constrain retrieval to the user’s permissions and test for cross-boundary document exposure.
Common confusions and exam tips
- Check assumptions and applicability before using a concept in a real decision.
Reference links
6.2Computer architecture, performance and reliability
Concept
CPU, memory and storage serve different roles and operate at different speeds. Caches exploit locality. Availability is MTBF/(MTBF+MTTR), improved by fewer failures and faster recovery. Series/parallel reliability calculations require explicit assumptions such as independent failures.
How it works / steps
- 90/(90+10)=0.9; MTTR measures restoration time.
- Both must work, giving 0.9×0.9=0.81.
- Subtract the probability both fail: 1−0.1×0.1=0.99.
Workplace example
MTBF 90 hours and MTTR ten give 90% availability. Two independent 0.9 units give 0.81 if both are needed, or 0.99 if either suffices.
Common confusions and exam tips
- Shared power or other common-cause failures can invalidate independent redundancy calculations.
Mini quiz
Q1. MTBF is 90 hours and MTTR ten. What is availability?
- 81%
- 90%
- 10%
- 99%
Show answer and explanation
Answer: B 90%
90/(90+10)=0.9; MTTR measures restoration time.
Q2. Two independent devices each have availability 0.9 and both are required. What is system availability?
- 0.81
- 0.99
- 0.90
- 0.18
Show answer and explanation
Answer: A 0.81
Both must work, giving 0.9×0.9=0.81.
Reference links
6.3Networks and internet protocols
Concept
IP routes traffic, TCP supports ordered reliable delivery, and DNS resolves names. TLS supports confidentiality and integrity in transit, not input correctness or endpoint safety. Distinguish bits per second from bytes: eight bits make one byte.
How it works / steps
- 100 MB is 800 megabits; 800/100=8 seconds.
- DNS resolves names; DHCP distributes address configuration to devices.
- TCP supports reliable ordered transport; TLS provides separate cryptographic functions.
Workplace example
Transferring 100 MB at 100 Mbps takes at least eight seconds theoretically, before overhead and congestion.
Common confusions and exam tips
- HTTPS alone does not establish the operator’s trustworthiness or content accuracy.
Mini quiz
Q1. Transfer 100 MB over 100 Mbps, using decimal MB and ignoring overhead. How long?
- 100 seconds
- 0.125 seconds
- 8 seconds
- 1 second
Show answer and explanation
Answer: C 8 seconds
100 MB is 800 megabits; 800/100=8 seconds.
Q2. Which mechanism looks up IP addresses and related records for host names?
- FTP
- DNS
- DHCP
- SMTP
Show answer and explanation
Answer: B DNS
DNS resolves names; DHCP distributes address configuration to devices.
Reference links
6.4Relational databases, SQL and normalization
Concept
Primary keys identify rows and foreign keys support references. Normalization reduces redundancy and update anomalies through functional-dependency analysis. ACID covers atomicity, consistency, isolation and durability. WHERE filters rows; HAVING filters aggregated groups.
How it works / steps
- A primary key uniquely identifies rows and is non-null; foreign keys express references.
- Atomicity prevents partial completion; durability preserves committed results.
- HAVING filters aggregate groups; WHERE filters rows before aggregation.
Workplace example
Keeping customer details in a referenced customer table avoids inconsistent updates across many sales records.
Common confusions and exam tips
- Normalization does not guarantee faster queries; assess joins and workload too.
Mini quiz
Q1. Which constraint uniquely identifies each table row?
- Foreign key alone
- Sort order
- Display alias
- Primary key
Show answer and explanation
Answer: D Primary key
A primary key uniquely identifies rows and is non-null; foreign keys express references.
Q2. In ACID, what makes a transaction all-or-nothing?
- Durability
- Availability
- Atomicity
- Isolation
Show answer and explanation
Answer: C Atomicity
Atomicity prevents partial completion; durability preserves committed results.
Reference links
6.5Requirements, development and testing
Concept
Requirements include performance, availability, security and operations as well as functions. Choose sequential or iterative delivery according to uncertainty. Unit, integration, system and acceptance testing have different scopes and responsibilities; combine testing with reviews and static analysis.
How it works / steps
- It specifies service quality and performance rather than which business function is provided.
- Integration tests exercise interfaces and interactions among components.
- Short iterations generate evidence and feedback while retaining quality criteria and change decisions.
Workplace example
Translate “fast screens” into measurable conditions, such as 95% of responses within two seconds at defined load, with an agreed test environment.
Common confusions and exam tips
- Agile delivery still needs requirements, quality evidence and appropriate approvals.
Mini quiz
Q1. “95% of responses within two seconds at peak load” is primarily what?
- A contractual payment method
- A nonfunctional performance requirement
- A revenue-posting function
- A customer-category data field
Show answer and explanation
Answer: B A nonfunctional performance requirement
It specifies service quality and performance rather than which business function is provided.
Q2. Which test checks connections and data exchange between modules?
- Integration testing
- Unit testing
- Only a desk code review
- Only user training
Show answer and explanation
Answer: A Integration testing
Integration tests exercise interfaces and interactions among components.
Reference links
6.6IT procurement, projects and service management
Concept
RFI gathers information and RFP requests proposals. Define contract responsibility, deliverables and acceptance. An SLA states agreed service levels. Incident management restores service, while problem management addresses underlying causes and recurrence.
How it works / steps
- It communicates requirements, constraints and evaluation conditions for comparable proposals.
- It agrees measures such as availability, response and support, including measurement and responsibility.
- It investigates causes and permanent prevention beyond immediate incident recovery.
Workplace example
For repeated outages, record the restart that restored service and separately track root cause and a permanent fix.
Common confusions and exam tips
- Outsourcing does not eliminate business acceptance or information responsibilities.
Mini quiz
Q1. What is the main purpose of an RFP?
- Finalize internal cost of sales
- Only measure outage recovery time
- Only issue user identifiers
- Request proposals against requirements
Show answer and explanation
Answer: D Request proposals against requirements
It communicates requirements, constraints and evaluation conditions for comparable proposals.
Q2. What does an SLA define?
- All employee appraisal criteria
- Retail product price lists
- Agreed service levels
- Programming-language syntax
Show answer and explanation
Answer: C Agreed service levels
It agrees measures such as availability, response and support, including measurement and responsibility.
Reference links
6.7ERP, process redesign and architecture
Concept
ERP integrates processes and data to reduce fragmented duplicate entry. BPR fundamentally redesigns work rather than merely replacing screens. Plan shared master data, ownership, exceptions, migration and adoption so that automation does not simply reproduce waste.
How it works / steps
- Shared meanings, identifiers and ownership prevent integrated systems from retaining inconsistent data.
- BPR fundamentally redesigns processes around purpose and customer value.
- Compare process errors, duplication, time and customer outcomes against the baseline and intended goals.
Workplace example
If sales, inventory and accounting use conflicting customer IDs, define shared keys and master-data ownership before integration.
Common confusions and exam tips
- Measure system installation separately from realized process improvement.
Mini quiz
Q1. What supports integration through ERP?
- Permanently incompatible departmental codes
- Unconditional automation of every exception
- Skipping migration-data validation
- Shared master data and ownership
Show answer and explanation
Answer: D Shared master data and ownership
Shared meanings, identifiers and ownership prevent integrated systems from retaining inconsistent data.
Q2. Which illustrates BPR?
- Adding duplicate entries for every department
- Automating without reconsidering the process
- Redesigning approvals from their purpose
- Copying paper forms directly to screens
Show answer and explanation
Answer: C Redesigning approvals from their purpose
BPR fundamentally redesigns processes around purpose and customer value.
Reference links
6.8Cloud, virtualization and APIs
Concept
IaaS provides infrastructure, PaaS an application platform, and SaaS a ready application. Responsibilities vary by service and contract. APIs need authentication, authorization, limits and compatibility management. Variable charges can grow with usage, so compare total ownership cost.
How it works / steps
- SaaS delivers application functionality; IaaS provides infrastructure and PaaS a platform.
- Compare initial, usage, staff, data migration and exit costs over the lifecycle.
- Authentication identifies the caller; authorization determines permitted actions and data.
Workplace example
Even with accounting SaaS, the customer must assess user access, data quality, export and exit arrangements.
Common confusions and exam tips
- Using cloud services does not eliminate backup and access-management needs.
Mini quiz
Q1. A customer uses a ready-made accounting application online. What service model is this?
- Dedicated on-premises hardware
- SaaS
- IaaS
- PaaS
Show answer and explanation
Answer: B SaaS
SaaS delivers application functionality; IaaS provides infrastructure and PaaS a platform.
Q2. What should cloud TCO include?
- Migration, operation, transfer and exit costs
- Only the base monthly fee
- Only first-year hardware purchases
- Only an introductory seminar fee
Show answer and explanation
Answer: A Migration, operation, transfer and exit costs
Compare initial, usage, staff, data migration and exit costs over the lifecycle.
Reference links
6.9Security, cryptography and authentication
Concept
Protect confidentiality, integrity and availability with access control, encryption, backups, monitoring and education. Symmetric and asymmetric cryptography have different key-distribution properties. Digital signatures use a private key to sign and a public key to verify; hashes are not reversible encryption.
How it works / steps
- The private key signs and the corresponding public key verifies. Distinguish signing from encryption.
- Knowledge plus possession are distinct factors; multiple knowledge secrets alone are not.
- Recoverable copies must resist the same attack and be tested through actual restoration.
Workplace example
Combining a password with a possession factor is multifactor authentication; entering two passwords is not two different factor types.
Common confusions and exam tips
- Backups need isolated storage and restoration checks, not just successful creation.
Mini quiz
Q1. Which key creates a digital signature?
- The signer’s private key
- The signer’s public key
- Only the verifier’s public key
- A shared public password
Show answer and explanation
Answer: A The signer’s private key
The private key signs and the corresponding public key verifies. Distinguish signing from encryption.
Q2. Which uses different authentication factors?
- Entering two different passwords
- Reentering the same secret
- Answering only two security questions
- Password plus a possession-device check
Show answer and explanation
Answer: D Password plus a possession-device check
Knowledge plus possession are distinct factors; multiple knowledge secrets alone are not.
Reference links
6.10Statistics, analytics and AI
Concept
Means and medians differ in sensitivity to outliers. Correlation does not prove causality, and leakage inflates validation performance. For classifiers, precision=TP/(TP+FP), recall=TP/(TP+FN). Select metrics based on the costs of false alarms and missed positives.
How it works / steps
- TP/(TP+FP)=30/40=75%; recall is 30/50=60%.
- TP/(TP+FN)=30/50=60%, the share of actual positives detected.
- The middle ordered observation is three; the mean of 22 is pulled upward by 100.
Workplace example
With TP30, FP10 and FN20, precision is 75% and recall 60%. Overall accuracy alone can hide performance on rare fraud.
Common confusions and exam tips
- Check temporal/customer splits and exclude future information unavailable at prediction time.
Mini quiz
Q1. TP=30, FP=10 and FN=20. What is precision?
- 60%
- 50%
- 40%
- 75%
Show answer and explanation
Answer: D 75%
TP/(TP+FP)=30/40=75%; recall is 30/50=60%.
Q2. TP=30, FP=10 and FN=20. What is recall?
- 40%
- 50%
- 60%
- 75%
Show answer and explanation
Answer: C 60%
TP/(TP+FN)=30/50=60%, the share of actual positives detected.
Reference links
6.11IT controls, audit and business continuity
Concept
IT controls include approvals, separation of duties, change records and access control. Audit assesses evidence independently. BCP addresses business continuity and restoration. RTO is target restoration time; RPO defines the acceptable point of data loss.
How it works / steps
- RTO sets how soon service must recover; RPO addresses data age.
- It defines the recoverable data point, not the restoration duration.
- Separate request, approval and implementation, or add review, to reduce unilateral improper changes.
Workplace example
RTO four hours and RPO one hour call for restoration within four hours and at most one hour’s data loss as design objectives.
Common confusions and exam tips
- Backup frequency alone does not determine recovery duration; procedures and exercises matter.
Mini quiz
Q1. What does RTO primarily specify?
- Mean time between failures
- Return on investment
- Target recovery duration
- Acceptable data-loss point
Show answer and explanation
Answer: C Target recovery duration
RTO sets how soon service must recover; RPO addresses data age.
Q2. What does an RPO of one hour mean?
- Audit the system every hour
- Limit data loss to at most one hour
- All operations must restart within one hour
- Allow only one outage hour per year
Show answer and explanation
Answer: B Limit data loss to at most one hour
It defines the recoverable data point, not the restoration duration.
Reference links
Lessons are written by this site based on public information and do not guarantee exam content. Product specifications change, so check the latest information at the reference links.
Notes (unofficial, original questions, no pass guarantee)
- The questions on this site are original practice questions written by this site based on publicly available skills outlines and exam guides. They are not actual exam questions.
- PMP and PMI are marks of Project Management Institute, Inc. This site is independent of PMI, the Japanese SME examination body and registration authorities; it is not an authorized training provider.
- This content is a study aid and does not guarantee a pass. Exam content, format and prerequisites may change without notice; always check the latest information on the official page before taking the exam.
- A short practice score does not reproduce official scoring or predict a pass. Check each course’s stated coverage.
- Progress is saved only in this browser (localStorage) unless you sign in with Google to sync it. You can delete it from the Cookie & storage settings page (Japanese).