1CEN 6070 Software Quality Assurance and Testing Summer 2004 Exam 2 Answer all questions on the exam sheets. Use backs of pages as needed Name: _______________________ First Part. Questions from the Galin Text. (5 points each) I. 1. One of the three components of maintenance service is adaptive maintenance. List and describe all three. Pages 255-256 Corrective – User support services and software corrections Adaptive – Adapt the software to differences in new customer requirements, changing environmental conditions, and the like Functionally improvement – Combines (1) perfective maintenance of new functions added to the software and (2) preventative maintenance activities that improve reliability and system infrastructure for easier and more efficient future maintenance. 2. Galin discusses four risks in having external participants within the framework of a project. One is low quality of parts. List the other three. Pages 283-284 Delays in completion of the project Low quality of parts supplied by the external participants Future maintenance difficulties Loss of control over project parts23. Define classic and real CASE tools. Page 299 Classic tools are well established ones such as interactive debuggers, compliers, and project control systems. Real case tools are more recent and support different phases of development. Upper CASE tools support design and analysis, while lower CASE tools support the coding phase. Integrated tools support design and analysis, as well as coding. 4. Galin discusses four contributions of templates to software quality. One is facilitates the process of preparing documents. List the other three. Pages 326-327 Facilitates the process of preparing documents Ensures that documents prepared by the developer are more complete Provides for easier integration of new team members Facilitates review of documents 5. Galin discusses four issues related to document security (including their disposal). One is determine the storage period. List the other three. Page 395 Provide restricted access to document types Prevent unauthorized changes to stored documents Provide back-up for stored paper as well as electronic files Determine the storage period3Second Part: Questions from the Lectures and Notes 1. We discussed four roles of individuals involved in change. One is sponsor. List and briefly define all four. 5 points Champions - Initiate the change process. They bring management’s attention to the subject, obtain the blessings of a sponsor, and establish the credibility to get the change program launched Sponsors - People in authority who supply the resources and the official backing to implement the change Change agents - People who lead the change planning and implementation Targets - People who will be expected to change their work habits 2. We discussed software risk management. In that context, a. If a house is worth $250,000 and the probability it will burn is 10%, what is the risk exposure? 5 points Risk Exposure = Prob(Loss) x Size(Loss) = 0.10 x $250,000 = $25,000 b. Define the terms: 5 points each A risk is the probability of unwanted consequences of an event and decision An opportunity is the probability of exceeding expectations. A risk is the probability of failing to meet expectations A problem is something requiring thought and skill to arrive at a proper conclusion or decision4c. We discussed three causes of risk based on uncertainty. One is uncertainty in information. List and briefly define all three. 5 points Uncertainty in Time - Uncertainty about when certain evens may occur or the ability to react to them Uncertainty in control - Inadequate authority to make or influence decisions Uncertainty in information - Inadequate or inaccurate information on which to base decisions d. We discussed three risk-handling strategies. One is avoid. List and briefly discuss all three. 5 points • Mitigate - Reduce the probability ad/or impact of the risk • Avoid - Eliminate the possibility of a specific risk by choosing an alternative path. May mean swapping one risk for more acceptable ones • Transfer - Get someone else to share or assume the risk • Accept - Plan a contingency, track the risk, and enact if it becomes a problem 3. We discussed case studies of software process improvement based on CMM. Answer the following. a. While productivity (as measure in source lines of code)generally increases markedly as an organization climbs the CMM ladder from level 1 to level 5, sometimes a slight dip occurs before resuming the improvement. When does this dip usually happen? 5 points Going to level 3 from level 25b. Many organizations reported lessons learned. List at least three of the ones common across organizations. 5 points The following were all copied from the class notes • Strong sponsorship by the chief executive officer is critical. • A central, experienced team should participate in software improvement initiatives. • In-house groups should be trained together to effect a cultural change. • The path to improvement requires investment, risk, time, and the pain of cultural change. Delegation is not strong enough to overcome these roadblocks. Commitment is. Process improvement should be tied to the salary or promotion of senior management • A focal point is essential...The SEI calls this focal point an SEPG. Hughes calls it an engineering council. Whatever the name, there must be a focal point. • Focus on improving new projects. It is extremely difficult to change projects, especially at lower maturity levels, once they have started. • Adopt a top-down focus before immersing yourself in CMM details; start by assessing the intent of each KPA so that you can determine how it fits into your environment; • Emphasize productivity, quality, and cycle time. Avoid process for its own sake; • Management commitment is needed from all levels; commitment from upper management won’t be enough unless individual proj ect leaders and managers are determined to succeed; • Practitioners and task leaders, not outside experts, should be used to define processes; • Managers must be convinced of process improvement’s value; it’s not free, but in the long run it more than pays for itself. • The customer must be kept informed about the process, especially when process changes occur; • Copying process documents from other organizations usually does not