Software inspection is best described as a process for identifying software defects. Inspections

involve a detailed examination of software artifacts, such as requirements, design documents, and

code, to detect errors and issues early in the development process. The primary goal of inspections is

defect detection rather than defect correction, capability evaluation, or testing supplementation.

This proactive approach helps to improve software quality and reduce the cost of fixing defects later

in the development cycle.

Reference:

Fagan, Michael E. "Design and Code Inspections to Reduce Errors in Program Development." IBM

Systems Journal, 1976.

Gilb, Tom, and Dorothy Graham. "Software Inspection." Addison-Wesley, 1993.

Virtualization is a technology that enables multiple virtual machines (logical computers) to run on a

single physical hardware system. This is achieved by using software (hypervisors) to create and

manage these virtual machines, allowing for better resource utilization and isolation between

different environments.

Reference:

"Virtualization Essentials" by Matthew Portnoy.

VMware vSphere documentation, which explains the principles and benefits of virtualization.

A project phase gate review is a key review process conducted at critical points (gates) during a

project’s lifecycle to evaluate the project's progress, performance, and readiness to proceed to the

next phase. The correct set of reviews in this context includes:

Management Reviews: These are conducted at various points to ensure that the project aligns with

business objectives, risks are managed, resources are available, and the project is on track in terms

of schedule and budget. These reviews often serve as checkpoints before moving from one project

phase to another.

Ready to Ship Reviews: This review occurs towards the end of the development cycle, where the

product is evaluated for its readiness to be delivered to the customer or market. It ensures that all

criteria for release have been met, including quality standards, functionality, and compliance.

Reference:

Project Management Institute (PMI) Standards

Software Engineering Institute (SEI) Project Phase Gate Reviews

Reengineering a software module typically involves assessing various factors such as code

complexity, maintainability, performance requirements, and the age of the platform. The goal is to

identify modules that are costly to maintain, difficult to understand, or are becoming obsolete due to

platform changes12.

Cyclomatic Complexity: This is a quantitative measure of the number of linearly independent paths

through a program’s source code. A higher cyclomatic complexity indicates a more complex and

potentially less maintainable module2.

Looking at the table provided:

Module A has a version number of 12 and a cyclomatic complexity of 9.

Module B has a version number of 3 and a cyclomatic complexity of 21.

Module C has a version number of 9 and a cyclomatic complexity of 4.

Module D has a version number of 11 and a cyclomatic complexity of 20.

Given these details, Module B stands out as the most likely candidate for reengineering for the

following reasons:

It has the highest cyclomatic complexity (21), which suggests that the code is highly complex and

may be difficult to maintain or extend2.

The version number being 3 indicates that it has undergone fewer iterations of updates or fixes

compared to the other modules, which might imply that it has legacy code that could benefit from

reengineering.

Functional testing is a type of software testing that evaluates the functionality of a software

application by testing it against the specified requirements. The primary goal of functional testing is

to ensure that the software works as per the desired specifications and performs its intended

functions correctly123.

Is sufficiently free of operational problems (Option A): One of the main objectives of functional

testing is to demonstrate that the software operates correctly and is free of issues that could affect

its operation. This includes testing the software to ensure that it is performing its required functions

without errors or problems12.

Is understood by the user (Option B): While user understanding is important, it is not the primary

objective of functional testing. User understanding is more related to usability testing, which

assesses how easily users can learn and use the product.

Interacts appropriately at the unit level (Option C): Interaction at the unit level is typically tested

during unit testing, which is a subset of functional testing but not its overarching

objective. Functional testing looks at the application as a whole rather than individual units2.

Processes the data in a structured manner (Option D): Although processing data correctly is part of

functional testing, the focus is on whether the software performs its intended functions and not

specifically on the structure of data processing.

Definition of Patents: Patents provide legal protection for new inventions, granting the inventor

exclusive rights to use and commercialize the invention for a certain period.

Purpose of Patents: They prevent others from making, using, or selling the invention without

permission, thus protecting the intellectual property of the inventor.

Other Forms of IP Protection: While copyrights, licenses, and trademarks also protect intellectual

property, they do not specifically cover novel inventions in the same way patents do.

A Maturity Level 5 organization, according to the Capability Maturity Model Integration for

Development (CMMI-DEV) V1.2, is focused on continuous process improvement. Such organizations

leverage quantitative data to prevent defects and optimize processes. Submitting defect data to a

team dedicated to future defect prevention aligns with this objective, as it emphasizes proactive

measures to improve quality and prevent issues from reoccurring.

Collecting defect data and establishing process capability baselines are characteristics of lower

maturity levels, while independent assessment of defect data ensures accuracy but does not

inherently demonstrate a Level 5 focus on continuous improvement.

Reference:

CMMI for Development, Version 1.2, Carnegie Mellon University.

"CMMI: Guidelines for Process Integration and Product Improvement" by Mary Beth Chrissis, Mike

Konrad, and Sandy Shrum.

Earned Value Analysis (EVA) is a project management technique used to measure project

performance and progress. It integrates project scope, time, and cost data to provide accurate

forecasts of project performance.

Planned Value (PV): The estimated value of work planned to be done.

Earned Value (EV): The value of work actually completed.

Actual Cost (AC): The actual cost incurred for the completed work.

Using these metrics, EVA can help project managers assess whether they are ahead or behind

schedule and within or over budget.

Reference:

"Project Management: A Systems Approach to Planning, Scheduling, and Controlling" by Harold

Kerzner

PMBOK Guide by Project Management Institute (PMI)

Queries per user group per timeframe is the most effective usage metric for capacity planning of a

data warehouse. This metric provides detailed insights into the workload generated by different user

groups over specific periods, allowing for accurate forecasting of resource needs and planning for

future capacity. It helps in identifying patterns and peak usage times, which are crucial for efficient

capacity management.

Reference:

"Data Warehousing in the Real World: A Practical Guide for Building Decision Support Systems" by

Sam Anahory and Dennis Murray

"The Data Warehouse Lifecycle Toolkit" by Ralph Kimball et al.

Software security is designed to protect systems and data from various types of communication

threats. These threats can be categorized as:

Intentional Attacks: These are deliberate actions taken by malicious individuals or groups aiming to

exploit software vulnerabilities for gain, disruption, or espionage. Examples include hacking,

phishing, and malware attacks.

Unintentional Attacks: These are accidental events that can cause security breaches, such as user

errors or software bugs.

Physical Attacks: These involve physical actions against hardware that can affect software, like theft

or damage.

Natural Disasters: Events such as earthquakes or floods that can physically damage systems and

cause software failures.

Among these, software security primarily addresses intentional attacks. The focus is on preventing

unauthorized access, data breaches, and other forms of cyber attacks.

Reference:

"Software Security: Building Security In" by Gary McGraw

NIST Special Publication 800-53, Security and Privacy Controls for Information Systems and

Organizations