University of Maryland ITEC 610 Final Exam: Drewmobile Analysis

This document presents a comprehensive solution to the ITEC 610 final exam from University of Maryland University College, Spring 2019. The exam focuses on Drewmobile Incorporated and addresses several key areas. The first question examines the application of the Systems Development Life Cycle (SDLC) to automate the company's travel request process. The second question analyzes the cybersecurity practices of Tony Stark, evaluating the trade-off between cybersecurity and convenience and identifying best practices for travelers. The third question addresses IT security concerns for Drewmobile following a merger, including key focus areas, transition strategies, and non-technical considerations. Finally, the fourth question explores the pros and cons of outsourcing and offshoring IT functions for Drewmobile, considering the American economy under President Trump, operational and ethical challenges, and various theoretical perspectives, including stockholder, stakeholder, and social contract theories, and the company's sustainability and community impact.

University of Maryland University College
ITEC 610 Section 1111-1809
Spring 2019
Final Essay Exam
Tuesday, April 16, 2019
The Final Exam is due by 11:59 p.m. EST Monday, April 22, 2019.
This is an open-book individual exam comprised of 5 questions. Please
answer all 5 questions in the form of an essay exam response.
Guidelines:
 Put your name in the exam.
 You should submit your exam to your assignment folder in LEO in a MS-Word
(preferred),
MS-RTF, PDF or ASCII file. Please scan your file against viruses before
submitting.
 Please keep the full text of the question as part of your answering sheet.
 Be as clear and objective as you can in all questions and be sure you are
answering what is asked (you will lose points for rambling).
 Justify all your numerical answers and answer all the questions using your
own words. Show all your work, including how you found your answer (this
is very important and essential to have your answer graded appropriately!).
Make sure that you read, acknowledge, and follow the following
rules
Rules:
 The exam is to be taken in accordance with the UMUC Honor Code – e.g., do
not collaborate or seek help from anyone else.
 This is an open-book exam but you are only allowed to use your textbook and
information posted in our classroom. Please do not use any other sources that
are not listed in our classroom. For example, you can refer to our class lecture
notes and all links posted in the lecture notes but you should not search the Web
for information to solve exam questions.
 You should not discuss exam questions with other students or anyone else. If
you have any questions about the exam, please send me an email.
Acknowledge:
I, ______________Please Fill_____________ acknowledge the above
rules.
(Your name)

1. How would you use the stages of the Systems Development Life Cycle
(SDLC) to help Drewmobile Incorporated automate its currently manual
business process known as “Submit Official Travel Requests & Vouchers ”?
(see Chapter 13). Drewmobile Incorporated wants to move from a manual
process, which involves using hard copy forms, to a more online web-based
experience. Please craft a well-written and fluid essay exam response to
address this question. Moreover, please use examples to support your
answer. Do not use a bulleted list.
Introduction
System Development Life Cycle is one of the most evolving technology that
provides higher efficiency to the functional process of the business organizations that
implements SDLC. The processes that will be required for implementing SDLC will be
stated in this essay.
Steps to implement Automation
The initial step that must be taken by Drewmobile for incorporating automation
includes testing. It can be stated that a DevOps team can never be 100% successful until
they are relying on testing phase that will be performed manually. For Example: if a
client of Drewmobile complains regarding presence of a certain bug, they can test and
identify the bug and resolve the issue. Software testing will also be one of the major
aspects of the testing process. in the next stage coding is the main concern. Drewmobile
must execute the coding in the different phases (Gupta, Ahlawat & Sagar 2017). These
phases include fixing of the errors with the help of the bureaucratic association of the
large-scale software process. the most important section of the automation
implementation is developing the code and deploying the same. Performing API
management and application workflow process is also included in this stage. After this
stage the main aspect that is taken inti consideration is Development environment.
Infrastructure management is one of the main aspects that helps DevOps group for
eliminating the error prone methods (Karim, Saba and Albuolayan 2017). For example:
Using of Agile technology by the users will help in implementing the iteration process in
a better manner. Proper scalability, Dashboards, Data and database will be used in the
development environment stage. After this stage security checking will be performed. In
this stage, security testing will be performed. After this security testing, vulnerability
scanning will be performed. Security and compliance will be performed along with
proper implementation of patches and security reporting. After this stage deployment
phase will be performed by the Drewmobile. Usage of feedback loop will be seen (Tsui,
Davis & Sahlin 2018).
Conclusion
From the above discussion, it can be stated that after following the steps that are
stated in this essay, Drewmobile will be able to implement automation in their business
process.
2. When Tony Stark, CEO of Stark Industries, travels to other countries, he
follows a routine that seems straight from a secret agent movie. He leaves his
smart-phone and laptop at home. Instead he brings loaner devices, which he
erases before he leaves the U.S. and wipes clean the minute he returns. While

traveling, he disables Bluetooth and Wi- Fi and never lets his phone out of his
sight. While in meetings, he not only turns off his phone, but also removes the
battery for fear his microphone could be turned on remotely. Mr. Tony Stark
connects to the Internet only through an encrypted, password-protected
channel. He never types in a pass-word directly, but copies and pastes his
password from a USB thumb drive. By not typing his password, he
eliminates the risk of having it stolen if key-logging software got installed on
his device.
Many travelers might consider Tony Stark’s method too inconvenient.
Clearly, his electronically clean methods are time consuming and expensive.
By way of a well written and fluid essay exam response, please address the
below questions:
a) Is there a tradeoff between cybersecurity and convenience? Explain.
b) PLEASE create a list and explain the best cybersecurity practices for
travelers based on Tony Stark’s methods
Introduction
Cyber security has been one of the major concerns in todays society. This is one
of the main reasons that business management of Tony Stark is performed with such high
conservative manner. This essay will discuss about the link in between the cyber security
and its convenience and provide proper cyber security measures.
Discussion
There is a tradeoff in between cybersecurity and convenience of communication
process. in case the convenience process is considered the main aspect that is considered
is that with increase in convenience in functioning robustness of the entire infrastructure
gets affected. With lack of robustness it gets easy for the imposters to gain access to the
data that are present in the database. After this unauthorized access to the data that are
stored in the data base, alteration of the data can be performed and this will affect the
regular lifestyle of the victim.
The best security practices that must be implemented as per the cybersecurity
concern. This includes the fact that proper understanding of the entre terminology will get
functional in a better manner. The list is as follow: -
 Usage of loaner device: Usage of loaner device helps in increasing privacy of the
data that will be transacted during the tour.
 Disabling Wi Fi and Bluetooth: With the help of disabling of the Wi Fi or
Bluetooth, gaining access to the network of the mobile devices can be blocked.
 Usage of encrypted passwords: With usage of proper encryption of the password,
the main benefit that will be received includes the password can be gained access
to unless decoding is performed.
 Copy and pasting passwords: With this process the main aspect that is taken into
consideration includes higher security from the keyboard tracking software.
Conclusion
From the above discussion it can be stated that convenience and security does not go
hand in hand and steps are needed to be taken for increasing the efficiency.

3. You have just been promoted to Chief of IT Security for Drew-mobile
Incorporated. You just learned that our organization will be merging with
another automotive company which has a history of detrimental breaches
due to poor security management. Please craft a well-written and fluid essay
exam response to address the below three (3) questions:
a. What are the key IT-security areas of focus?
b. What strategies and technologies you would consider in the
transition?
c. Discuss non-technical considerations as well.
Please present your answer in the form of a well crafted essay response.
Introduction
This essay will discuss about the key IT security areas of focus. This essay will
also discuss about the strategies and technologies that must be considered. This essay will
also discuss about the non-technical considerations that will enhance the security of the
system.
Discussion
The key areas of focus include the areas of data breaching consideration the main
aspect that must be taken undertaken includes proper checking of the networking systems
that will be used. With help of proper checking of the network system issues present can
be detected and hence mitigation process will get easier. Checking the cloud storage
infrastructure must be kept in focus as the data that will be stored in the cloud might get
accessed in an unauthorized manner (Vijayakumar & Arun 2017).
The strategy that must be implemented in the process includes performing
encoding of data during its transaction process. Usage of firewall in the database system
will also be helpful in the functional process. This ensures the fact that better
understanding of the project will get better and hence better unauthorized access can be
prevented.
The non-technical aspect that will be taken into consideration includes the fact
that employees of the organization might be a bridge in between the imposters and the
data that are stored in the database and hence usage of biometric system will be
beneficial.
Conclusion
From the above discussion a proper understanding of the issues that might affect
the functional process can be well understood along with the recommendations that are
provided will help in overcoming the issues.
4. Please explain to me, via a well crafted essay response, why Drewmobile
Incorporated, a medium-size company with 8,000 employees, should or
shouldn’t consider out-sourcing and/or offshoring of our Information
Systems Management & Information Technology Management functions?
a. Such a decision & essay exam response should include:
i. the state of the American economy under President Donald J.
Trump,
ii. operational challenges associated with both courses of action,
iii. considerations from a deontological ethical perspective

iv. as well as what’s in the best interest for the corporation from a
sustainability perspective and the greater community
perspective
1. Stockholder Theory
2. Stakeholder Theory
3. Social Contract Theory
Introduction
This essay will discuss about the state of American economy under Trump. This
essay will also discuss about the operational and ethical challenges regarding outsourcing
of projects. Implementation of stakeholder, stockholder and social contract theory will
also be provided.
Discussion
American state of economy has been in a stable condition under the governance
of Trump. According to me outsourcing of project must not be done. The major reason of
this aspect is that there are operational challenges that are to be faced (Hyman 2017). In
case of outsourcing the project is to be handed over to a whole new organization. despite
the fact that the functional process will get benefitted in case of not outsourcing the
project. In this case the entire project will be performed by Drewmobile. This will ensure
that integration process will get facilitated. Hence the efficiency of the entire system will
get facilitated.
Ethical dilemma is also present in case of outsourcing. In case of outsourcing, a
third-party organization will be functioning as per Drewmobile and their output will be
representing Drewmobile and hence Drewmobile’s reputation might be at stake.
As per the stockholder theory the main concern that is present includes increasing
of the return of the shareholders (Alshamrani & Bahattab 2015). In case of stakeholder
theory, the main concern that is taken into consideration includes better management of
the business process along with the shareholders and the other employees and the people
concerned with the functioning of the project. Social contract theory is mainly concerned
with the functioning of the employees as per their beliefs and legitimacy.
Conclusion
From the above discussion it can be stated that outsourcing must be prevented in
order to have a functional as well as ethical efficiency.
5. Please describe to me, via a well crafted essay response, how Business
Intelligence, specifically the “Circle of B.I.” as it was explained in class,
affects the SDLC and the levels of Decision Making (to include information
requirements and types of decisions).
Introduction
This essay will discuss about the usage of BI in the functional process of the
decision making.
Discussion
The main benefits that are received after using the terminology of the BI along
with SDLC for having a better decision-making process includes the fact that better data
visualization can be made with the help of the BI (Aljawarneh, Alawneh & Jaradat 2017).
With the help of better data visualizing the main advantage that will be received includes
better decision making as analyzing gets easier (Kumar 2018). A better connection with

the data base helps in analyzing the stakeholder status in a better manner and hence wise
decision making gets easier.
Conclusion
From the above discussion it can be stated that BI will help in decision making as
the data that are stored in the data base gets accessed in a better manner and hence
analysis gets easier.

References
Aljawarneh, S. A., Alawneh, A., & Jaradat, R. (2017). Cloud security engineering: Early
stages of SDLC. Future Generation Computer Systems, 74, 385-392.
Alshamrani, A., & Bahattab, A. (2015). A comparison between three SDLC models
waterfall model, spiral model, and Incremental/Iterative model. International Journal of
Computer Science Issues (IJCSI), 12(1), 106.
Gupta, D., Ahlawat, A. K., & Sagar, K. (2017). Usability prediction & ranking of SDLC
models using fuzzy hierarchical usability model. Open Engineering, 7(1), 161-168.
Hyman, H. (2017). Bridging the Gap between RFP and SDLC: How to Meet the
Challenge with a Software Development and Implementation Plan (S-DIP).
Karim, N.S.A., Saba, T. and Albuolayan, A., 2017. Analysis of software security model
in the scenario of Software Development Life Cycle (SDLC). Journal of Engineering
Technology (ISSN: 0747-9964), 6(2), pp.304-316.
Kumar, M. (2018). A Comparative Study of Universally Accepted SDLC Models for
Software Development.
Tsui, R., Davis, D., & Sahlin, J. (2018, July). Digital Engineering Models of Complex
Systems using Model‐Based Systems Engineering (MBSE) from Enterprise Architecture
(EA) to Systems of Systems (SoS) Architectures & Systems Development Life Cycle
(SDLC). In INCOSE International Symposium (Vol. 28, No. 1, pp. 760-776).
Vijayakumar, K., & Arun, C. (2017). Continuous security assessment of cloud based
applications using distributed hashing algorithm in SDLC. Cluster Computing, 1-12.