CRCM (IFPUG) — Questions and Answers
Question 1: Under IFPUG guidelines, which scenario correctly describes when an External Inquiry (EInq) differs from an External Output (EO)?
- An EInq retrieves data without transforming or deriving new values; an EO may derive or calculate output data (Correct answer)
- An EInq always involves two or more ILFs; an EO references only one
- An EInq is only triggered by external regulators; an EO is user-initiated
- An EInq updates an ILF as a side effect; an EO does not
Correct answer: An EInq retrieves data without transforming or deriving new values; an EO may derive or calculate output data
The key distinction is that an EInq retrieves and displays data without mathematical derivation, while an EO processes, calculates, or transforms data to produce output.
Question 2: A CRCM overseeing an IT compliance audit finds the project team counted a file that stores temporary processing data not visible to end users. Under IFPUG rules, this file should be:
- Excluded from the count because it is not a user-identifiable group of data (Correct answer)
- Counted as an ILF since it is maintained by the application
- Counted as an EIF since it is referenced but not displayed
- Counted as a low-complexity ILF by default
Correct answer: Excluded from the count because it is not a user-identifiable group of data
IFPUG requires that ILFs be user-identifiable groups of logically related data; temporary or technical files invisible to users do not qualify.
Question 3: In the context of IFPUG and regulatory compliance, how does function point sizing help a compliance manager evaluate outsourced software development contracts?
- It provides a technology-neutral unit for defining deliverable scope and verifying what was actually built (Correct answer)
- It automatically generates compliance reports for regulatory review
- It replaces the need for a statement of work in vendor contracts
- It measures vendor adherence to data privacy regulations
Correct answer: It provides a technology-neutral unit for defining deliverable scope and verifying what was actually built
Function points offer a consistent, language-independent size metric that can be used to specify contractual scope and objectively verify delivery.
Question 4: A regulatory compliance system's External Input adds a record to one ILF, updates a second ILF, and references an EIF for validation. What is the File Type Referenced (FTR) count for this EI?
- 3 (two ILFs maintained plus one EIF referenced) (Correct answer)
- 2 (only the ILFs that are maintained count as FTRs)
- 1 (only the EIF counts as an FTR for an EI)
- 4 (each field in each file counts as a separate FTR)
Correct answer: 3 (two ILFs maintained plus one EIF referenced)
For an EI, FTRs include all ILFs maintained and all EIFs referenced during processing, so 2 maintained ILFs plus 1 referenced EIF equals 3 FTRs.
Question 5: Which IFPUG concept most closely aligns with a compliance manager's concern about measuring the true business value delivered by a software project?
- Functional size, which measures user-visible functionality independent of implementation (Correct answer)
- Technical complexity adjustments based on system architecture
- Lines of code as a proxy for development investment
- Defect density as a measure of software quality
Correct answer: Functional size, which measures user-visible functionality independent of implementation
Functional size captures the amount of business functionality delivered to users, making it the most business-relevant IFPUG measure for compliance managers.
Question 6: According to IFPUG, what is the unadjusted function point (UFP) value for a low-complexity Internal Logical File?
- 7 (Correct answer)
- 5
- 10
- 15
Correct answer: 7
A low-complexity ILF is assigned 7 unadjusted function points according to the IFPUG Counting Practices Manual.
Question 7: A compliance officer reviewing an IFPUG count finds that the counting team included the same data group as both an ILF and an EIF. Which IFPUG rule does this violate?
- A data group maintained by the application cannot simultaneously be counted as an EIF for the same application (Correct answer)
- An ILF can also be counted as an EIF if referenced by more than one transaction
- EIFs and ILFs may share the same data group if they have different RET structures
- The CPM permits dual-counting when regulatory data is involved
Correct answer: A data group maintained by the application cannot simultaneously be counted as an EIF for the same application
IFPUG rules state that if data is maintained by the application being counted, it is an ILF for that application and cannot also be an EIF within the same count.
Question 8: Under IFPUG's Counting Practices Manual, which component is classified as a Data Function rather than a Transaction Function?
- Internal Logical File (ILF) (Correct answer)
- External Input (EI)
- External Output (EO)
- External Inquiry (EInq)
Correct answer: Internal Logical File (ILF)
Internal Logical Files are Data Functions because they represent user-identifiable groups of logically related data maintained within the application boundary.
Question 9: A compliance system receives data from a third-party regulator's database and stores it internally for reporting. How should the regulator's database be counted in IFPUG FPA?
- As an External Interface File (EIF) (Correct answer)
- As an Internal Logical File (ILF)
- As an External Input (EI)
- As an External Output (EO)
Correct answer: As an External Interface File (EIF)
Data maintained by an external application and referenced (but not maintained) by the counted application is classified as an External Interface File.
Question 10: In IFPUG function point counting, what does the term 'application boundary' define?
- The conceptual interface between the application being measured and the external world (Correct answer)
- The physical server infrastructure hosting the compliance system
- The regulatory jurisdiction governing the software
- The maximum number of users permitted to access the system
Correct answer: The conceptual interface between the application being measured and the external world
The application boundary separates the application being measured from its users and other applications, determining what is counted inside versus outside.
Question 11: A CRCM using IFPUG metrics to estimate a regulatory reporting project finds that a transaction updates data in two ILFs and references one EIF. What is the minimum number of Data Element Types (DETs) that must be counted for the EIF?
- One DET per unique field referenced by the transaction (Correct answer)
- Zero, because EIFs are not counted at the transaction level
- One fixed DET regardless of fields
- DETs are only counted for ILFs, not EIFs
Correct answer: One DET per unique field referenced by the transaction
DETs for an EIF are counted as the unique user-recognizable, non-repeated fields that are referenced across all transactions that use that EIF.
Question 12: Which IFPUG complexity level assigns the highest unadjusted function point value to an External Output?
- High complexity (Correct answer)
- Medium complexity
- Low complexity
- Very high complexity
Correct answer: High complexity
High complexity External Outputs are assigned 7 unadjusted function points, the maximum for that transaction type.
Question 13: When applying IFPUG FPA to assess scope changes in a compliance system mid-project, which type of count is most appropriate?
- Enhancement function point count (Correct answer)
- Development function point count
- Application function point count
- Baseline function point count
Correct answer: Enhancement function point count
An Enhancement Function Point Count measures the size of changes (additions, modifications, deletions) made to an existing application during an enhancement project.
Question 14: A compliance manager uses IFPUG metrics to benchmark software vendors. Which IFPUG-derived metric most directly compares development productivity across vendors?
- Function Points per person-month (Correct answer)
- Lines of code per defect
- Total test cases per release
- Number of ILFs per system
Correct answer: Function Points per person-month
Function Points per person-month is a standard IFPUG-aligned productivity metric that normalizes output across different technologies and vendor teams.
Question 15: In IFPUG counting, a Record Element Type (RET) is used to measure complexity of which function type?
- Data Functions (ILFs and EIFs) (Correct answer)
- Transaction Functions only (EI, EO, EInq)
- Both Data and Transaction Functions equally
- Only External Inputs (EIs)
Correct answer: Data Functions (ILFs and EIFs)
RETs are subgroups of logically related data within an ILF or EIF, and they are used along with DETs to determine the complexity of Data Functions.
Question 16: A regulatory compliance application is being retired. Under IFPUG guidelines, how should this be reflected in a function point count?
- As a deletion in an enhancement count, reducing the application baseline to zero (Correct answer)
- As a new development count for the replacement system only
- No count is required since the application is being removed
- As an EIF addition in the remaining systems that referenced it
Correct answer: As a deletion in an enhancement count, reducing the application baseline to zero
When an application is fully retired, all its functions are counted as deleted in an enhancement count, bringing the baseline size to zero.
Question 17: Which IFPUG principle ensures that counting is independent of the programming language or technology used?
- Technology independence (language-neutral measurement from the user's perspective) (Correct answer)
- Vendor neutrality clause in the CPM
- ISO/IEC 14143 compliance requirement
- Application boundary exclusion of technical components
Correct answer: Technology independence (language-neutral measurement from the user's perspective)
IFPUG FPA measures functionality from the user's perspective, making the count independent of implementation technology or programming language.
Question 18: For CRCM exam purposes, how does IFPUG define a 'user' in the context of function point analysis?
- Any person or application that interacts with the application being measured across its boundary (Correct answer)
- Only human end-users who directly operate the compliance system
- Regulatory agencies that mandate the system's existence
- Internal IT staff who administer the system
Correct answer: Any person or application that interacts with the application being measured across its boundary
In IFPUG, 'user' includes both human users and other applications that send or receive data across the application boundary.
Question 19: A compliance reporting system has an External Output that retrieves data from two ILFs and formats a regulatory report. The report contains 12 unique data fields. What complexity level does the FTR and DET combination suggest?
- High complexity, based on 2 FTRs and more than 5 DETs (Correct answer)
- Low complexity, because only two files are referenced
- Medium complexity, because 12 DETs always yields medium
- Low complexity, because regulatory reports default to low
Correct answer: High complexity, based on 2 FTRs and more than 5 DETs
An EO referencing 2 FTRs and more than 5 DETs falls into the High complexity cell of the IFPUG EO complexity matrix.
Question 20: Which ISO standard formally recognizes IFPUG Function Point Analysis as a functional size measurement method?
- ISO/IEC 20926 (Correct answer)
- ISO/IEC 27001
- ISO 9001
- ISO/IEC 25010
Correct answer: ISO/IEC 20926
ISO/IEC 20926 is the international standard that specifies the IFPUG method for functional size measurement of software.
Question 21: A compliance manager needs to estimate the effort for converting a legacy regulatory database. Under IFPUG, conversion functions are typically counted as part of which project type?
- Development project count, as conversion functions supporting the new application (Correct answer)
- Enhancement project count of the legacy system
- A separate standalone conversion application count
- They are excluded from all IFPUG counts
Correct answer: Development project count, as conversion functions supporting the new application
Conversion functions that are required to support migration of data for the new application are included in the development project function point count.
Under IFPUG guidelines, which scenario correctly describes when an External Inquiry (EInq) differs from an External Output (EO)?
What Practice Test Geeks adds beyond an AI chat for CRCM
An AI chatbot can quiz you, but it can't reproduce the exam conditions or keep your record. Here you get:
- A timed, full-length CRCM mock exam — 200 questions in 240 minutes with a 70% pass mark, modeled on the official exam's question count and time limit, followed by a score report broken down by exam domain.
- A fixed CRCM question bank: the same test every attempt, so your score is comparable from one try to the next instead of changing with every regenerated quiz.
- Progress saved on your device: completed tests, scores and missed questions stay in My Progress, so you can retake only what you got wrong.
- A printable CRCM cheat sheet you can print or save as a PDF.
- CRCM flashcards built from the same question bank.
These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- aba.com — Score validity, test delivery, fees, registration deadline, retake fee, retake policy, test dates, exam format, passing score, score release · verified Oct 2026