CRCM (IFPUG) 5 — Questions and Answers
Question 1: In IFPUG's enhancement function point counting formula, which equation correctly represents the size of an enhancement project?
- EFP = (ADD + CHGA + CFP) - DEL (Correct answer)
- EFP = ADD + MOD + DEL + CFP
- EFP = (ADD + MOD) / DEL
- EFP = CFP + DEL - ADD
Correct answer: EFP = (ADD + CHGA + CFP) - DEL
The IFPUG enhancement formula is EFP = (ADD + CHGA + CFP) - DEL, where CHGA is changed functionality, CFP is conversion function points, and DEL is deleted functionality.
Question 2: A compliance software vendor claims their tool requires 500 function points to build. Under IFPUG, what additional information is needed to convert this to an effort estimate?
- A productivity rate expressed as function points per person-month for the specific context (Correct answer)
- The number of regulatory agencies the tool must report to
- The programming language chosen for implementation
- The number of end users who will access the system
Correct answer: A productivity rate expressed as function points per person-month for the specific context
Function points are a size measure; converting to effort requires a productivity rate that relates size to the effort needed in a given organizational context.
Question 3: When auditing a compliance system's function point count, a CRCM notices the count includes a password field. Under IFPUG rules, how should a password or encrypted field typically be handled?
- It is counted as one DET if it is user-identifiable, regardless of whether it is displayed in encrypted form (Correct answer)
- Encrypted fields are always excluded from DETs
- Each character of a password counts as a separate DET
- Password fields count as a full RET within the ILF
Correct answer: It is counted as one DET if it is user-identifiable, regardless of whether it is displayed in encrypted form
A password field is a single user-identifiable attribute and counts as one DET even if its value is masked or encrypted in the user interface.
Question 4: Under IFPUG guidelines, which statement best describes the relationship between Function Point Analysis and software quality metrics for a compliance program?
- FPA measures size only; quality metrics such as defect density must be separately applied using FP as the denominator (Correct answer)
- FPA directly measures both size and software reliability in a single metric
- FPA replaces the need for quality audits in regulated environments
- FPA quality scores are reported directly to regulatory bodies as compliance evidence
Correct answer: FPA measures size only; quality metrics such as defect density must be separately applied using FP as the denominator
IFPUG FPA is a pure size measurement; it enables quality metrics like defects per function point when defect data is combined with the FP count.
Question 5: A compliance manager is comparing two software releases using IFPUG metrics. Release A delivered 300 UFPs in 6 months; Release B delivered 450 UFPs in 8 months. Which release had higher productivity?
- Release A, at 50 UFP/month versus Release B at approximately 56 UFP/month — Release B is actually higher
- Release A, because it was completed in fewer months
- Release B, because it delivered more total function points
- They are equal because both teams worked the same technology stack (Correct answer)
Correct answer: They are equal because both teams worked the same technology stack
Release A = 50 UFP/month and Release B ≈ 56.25 UFP/month, so Release B had higher productivity per month despite taking longer.
Question 6: Which IFPUG body is responsible for maintaining and updating the Counting Practices Manual (CPM)?
- The IFPUG Methodologies Committee (Correct answer)
- The ISO/IEC JTC1 SC7 subcommittee
- The Software Engineering Institute (SEI)
- The Object Management Group (OMG)
Correct answer: The IFPUG Methodologies Committee
The IFPUG Methodologies Committee is the internal body responsible for developing and updating the CPM that governs function point counting rules.
Question 7: A regulatory compliance project manager uses IFPUG function point counts to establish a software cost model. Which risk does the CRCM need to flag regarding this approach?
- Historical productivity data used in the model must come from comparable projects or the estimates will be unreliable (Correct answer)
- Function point counts automatically adjust for regulatory overhead costs
- IFPUG prohibits use of FP counts in cost estimation models
- Cost models based on FP counts require ISO 27001 certification to be valid
Correct answer: Historical productivity data used in the model must come from comparable projects or the estimates will be unreliable
Cost models derived from FP counts are only reliable when the underlying productivity rates come from similar projects; mismatched benchmarks produce inaccurate estimates.
CRCM (IFPUG) 5
In IFPUG's enhancement function point counting formula, which equation correctly represents the size of an enhancement project?