IKM Skills Assessment — Questions and Answers
Question 1: What is multi-factor authentication?
- Password complexity requirement
- Multiple simultaneous logins
- Two or more verification factors from different categories (Correct answer)
- Multiple passwords
Correct answer: Two or more verification factors from different categories
MFA requires factors from different categories: something you know, have, or are.
Question 2: An IT project manager is using the Critical Path Method (CPM) for scheduling. A delay on a specific task has occurred, but the overall project deadline has not been affected. How is this possible?
- The delayed task was not on the critical path and had sufficient float. (Correct answer)
- The project budget was increased to cover the delay.
- The project is using a phase-based Work Breakdown Structure.
- The risk was previously identified in the risk register.
Correct answer: The delayed task was not on the critical path and had sufficient float.
The Critical Path Method identifies the longest sequence of dependent tasks that determines the shortest possible project duration. Tasks on this critical path have zero float or slack. A delay in any critical path task will delay the entire project. Tasks not on the critical path have float, which is the amount of time they can be delayed without affecting the project's completion date.
Question 3: Which design pattern ensures a class has only one instance?
- Factory
- Strategy
- Observer
- Singleton (Correct answer)
Correct answer: Singleton
The Singleton pattern restricts instantiation to a single object with a global access point.
Question 4: Which of the following best describes 'data normalization' in relational database design?
- Encrypting sensitive fields to comply with data privacy regulations
- Scaling all numeric values to a 0–1 range for statistical analysis
- Converting unstructured text data into structured table format
- Organizing data to reduce redundancy and improve data integrity (Correct answer)
Correct answer: Organizing data to reduce redundancy and improve data integrity
Normalization is the process of structuring a relational database to eliminate redundant data and ensure data dependencies make logical sense, typically following normal forms (1NF, 2NF, 3NF).
Question 5: What does emotional intelligence (EQ) measure?
- Technical problem-solving
- Ability to recognize, understand, and manage emotions (Correct answer)
- Mathematical reasoning
- Memory capacity
Correct answer: Ability to recognize, understand, and manage emotions
EQ measures the ability to perceive, understand, manage, and use emotions effectively.
Question 6: Which of the following is a type of malware?
- Encryption
- Cloud storage
- Firewall
- Trojan Horse (Correct answer)
Correct answer: Trojan Horse
A Trojan Horse is a type of malicious software that disguises itself as legitimate software to trick users into installing it. Once installed, it can create backdoors, steal data, or cause other damage, making it a significant cybersecurity threat.
Question 7: Which of the following activities is a clear example of static testing?
- Performing user acceptance testing with business stakeholders.
- Running performance benchmarks on a database server.
- Executing a suite of automated regression tests after a bug fix.
- Conducting a formal code inspection of a new module. (Correct answer)
Correct answer: Conducting a formal code inspection of a new module.
Static testing involves examining the code and associated documents without executing the application. A formal code inspection or peer review is a prime example of this, as it analyzes the source code for defects before it is run. The other options all involve dynamic testing, which requires code execution.
Question 8: Which isolation level prevents dirty reads but allows non-repeatable reads?
- Read Uncommitted
- Serializable
- Repeatable Read
- Read Committed (Correct answer)
Correct answer: Read Committed
Read Committed prevents dirty reads but allows non-repeatable reads.
Question 9: Which virtualization type runs directly on hardware without a host operating system?
- Application sandbox
- Container runtime
- Type 1 hypervisor (Correct answer)
- Type 2 hypervisor
Correct answer: Type 1 hypervisor
A Type 1 (bare-metal) hypervisor runs directly on the physical hardware without requiring a host OS.
Question 10: A company purchases a new machine for $100,000 with a useful life of 10 years and no salvage value. Using the straight-line depreciation method, what is the impact on the company's financial statements in the first year of the machine's use?
- Net income decreases by $10,000 and the asset's book value decreases by $10,000. (Correct answer)
- Revenue decreases by $10,000 and liabilities increase by $10,000.
- Cash decreases by $100,000 and equity decreases by $100,000.
- Expenses increase by $100,000 and assets decrease by $100,000.
Correct answer: Net income decreases by $10,000 and the asset's book value decreases by $10,000.
Straight-line depreciation is calculated as (Cost - Salvage Value) / Useful Life. In this case, ($100,000 - $0) / 10 years = $10,000 per year. This $10,000 is recorded as Depreciation Expense on the Income Statement, which reduces net income. The asset's book value on the Balance Sheet is reduced by the accumulated depreciation of $10,000.
Question 11: What is code coverage analysis?
- Detecting vulnerabilities
- Measuring what percentage of code is exercised by tests (Correct answer)
- Measuring code speed
- Optimizing compilation
Correct answer: Measuring what percentage of code is exercised by tests
Code coverage measures the percentage of code executed during testing.
Question 12: Which measure of central tendency is LEAST affected by extreme outlier values in a dataset?
- Median (Correct answer)
- Mean
- Weighted average
- Mode
Correct answer: Median
The median is the middle value when data is sorted, making it resistant to outliers because extreme values do not shift it significantly, unlike the mean which is pulled toward outliers.
Question 13: What is the purpose of a subnet mask in IP addressing?
- To divide an IP address into network and host portions (Correct answer)
- To assign an IP address to a device
- To define the physical location of a server
- To encrypt data
Correct answer: To divide an IP address into network and host portions
A subnet mask is used in IP addressing to differentiate the network portion of an IP address from the host portion. This division allows for the creation of smaller, more manageable subnetworks within a larger network, improving efficiency, security, and organization of network resources.
Question 14: What is scope creep?
- Planned scope change
- Uncontrolled expansion of scope without adjusting time or cost (Correct answer)
- Moving deliverables to future phases
- Reducing scope to meet deadlines
Correct answer: Uncontrolled expansion of scope without adjusting time or cost
Scope creep is uncontrolled growth through incremental unapproved changes.
Question 15: What is network segmentation?
- Dividing a network to contain breaches and reduce attack surface (Correct answer)
- Combining networks for efficiency
- Rotating encryption keys
- Compressing traffic
Correct answer: Dividing a network to contain breaches and reduce attack surface
Segmentation divides a network into isolated segments to limit lateral movement during breaches.
Question 16: What does ACID stand for in database transactions?
- Availability, Concurrency, Isolation, Delivery
- Access, Control, Integrity, Distribution
- Atomicity, Consistency, Isolation, Durability (Correct answer)
- Automated, Consistent, Independent, Durable
Correct answer: Atomicity, Consistency, Isolation, Durability
ACID ensures reliable transactions: Atomicity, Consistency, Isolation, Durability.
Question 17: What is the difference between TCP Wrappers and iptables?
- Same technology
- TCP Wrappers is newer
- TCP Wrappers controls at application level; iptables filters at kernel level (Correct answer)
- iptables is UDP only
Correct answer: TCP Wrappers controls at application level; iptables filters at kernel level
TCP Wrappers uses hosts.allow/deny for services; iptables provides kernel-level packet filtering.
Question 18: What is a 'Slowly Changing Dimension' (SCD) in data warehousing?
- A fact table column whose values change only on a monthly aggregation schedule
- A dimension whose attribute values change over time and must be managed historically (Correct answer)
- A column that stores timestamp data for ETL auditing purposes
- A dimension table with fewer than 100 distinct rows
Correct answer: A dimension whose attribute values change over time and must be managed historically
A Slowly Changing Dimension (SCD) is a dimension whose attributes change slowly over time (e.g., a customer's address), requiring strategies like Type 1, 2, or 3 to track or overwrite historical values.
Question 19: Which of the ACID properties of a database transaction ensures that once a transaction has been committed, it will remain so, even in the event of a power loss or system crash?
- Atomicity
- Consistency
- Isolation
- Durability (Correct answer)
Correct answer: Durability
The Durability property of ACID ensures that after a transaction is successfully committed, the changes are permanent and will survive any subsequent system failure, such as a power outage or crash. The changes are written to non-volatile storage.
Question 20: Which topology provides highest fault tolerance but requires the most cabling?
- Bus
- Ring
- Full mesh (Correct answer)
- Star
Correct answer: Full mesh
A full mesh topology connects every device directly to every other device.
Question 21: What is RAID?
- Technology combining multiple disks for performance, redundancy, or both (Correct answer)
- Load balancing technique
- Memory management algorithm
- SSD file system
Correct answer: Technology combining multiple disks for performance, redundancy, or both
RAID combines multiple physical disks into a logical unit.
Question 22: What does "HTTP" stand for?
- Hyperlink Textual Protocol
- High Transfer Text Protocol
- High-Tech Transfer Process
- HyperText Transfer Protocol (Correct answer)
Correct answer: HyperText Transfer Protocol
HTTP stands for HyperText Transfer Protocol, which is the foundational protocol for data communication on the World Wide Web. It defines how messages are formatted and transmitted, and what actions web servers and browsers should take in response to various commands.
Question 23: What does "VPN" stand for?
- Verified Public Network
- Virtual Private Network (Correct answer)
- Variable Packet Node
- Virtual Programming Network
Correct answer: Virtual Private Network
VPN stands for Virtual Private Network, which creates a secure, encrypted connection over a less secure network, like the internet. It allows users to send and receive data as if their computing devices were directly connected to the private network, enhancing privacy and security.
Question 24: Which of the following is a key function of an operating system?
- Managing hardware resources (Correct answer)
- Compiling programs
- Word processing
- Web browsing
Correct answer: Managing hardware resources
An operating system (OS) serves as the core software that manages all computer hardware and software resources. Its primary function is to provide a platform for applications to run and to control peripherals like memory, processors, and input/output devices. Without an OS, the computer hardware would not be able to communicate or function cohesively.
Question 25: What is the difference between a risk and an issue?
- A risk is potential; an issue is a current problem (Correct answer)
- No difference
- Risks are more severe
- Issues affect budget; risks affect schedule
Correct answer: A risk is potential; an issue is a current problem
A risk is an uncertain future event; an issue is a problem that has materialized.
Question 26: What is the difference between black-box and white-box testing?
- Black-box is automated
- Black-box tests UI only
- Black-box tests without code knowledge; white-box tests with full code knowledge (Correct answer)
- Black-box tests security
Correct answer: Black-box tests without code knowledge; white-box tests with full code knowledge
Black-box tests functionality without seeing code; white-box examines internal logic.
Question 27: What is the purpose of virtual memory in an operating system?
- To protect data from viruses
- To increase processing speed
- To extend physical memory using disk space (Correct answer)
- To store user files
Correct answer: To extend physical memory using disk space
Virtual memory is a memory management technique that allows an operating system to compensate for shortages of physical memory by temporarily transferring data from RAM to disk storage. This process creates the illusion of a larger main memory than is physically available. It enables the system to run more applications or handle larger data sets than its physical RAM would otherwise permit, improving overall system performance and stability.
Question 28: What is the purpose of database normalization?
- Eliminate data redundancy and improve integrity (Correct answer)
- Compress storage
- Increase query speed
- Create backups
Correct answer: Eliminate data redundancy and improve integrity
Normalization organizes data to reduce redundancy and prevent update anomalies.
Question 29: What is the key difference between IaaS and PaaS cloud models?
- IaaS is private cloud only
- IaaS requires on-premise hardware
- IaaS provides infrastructure while PaaS provides a development platform (Correct answer)
- IaaS provides only storage while PaaS provides computing
Correct answer: IaaS provides infrastructure while PaaS provides a development platform
IaaS provides virtualized computing resources while PaaS provides a complete platform including runtime and development tools.
Question 30: What is the primary function of Active Directory in a Windows environment?
- Network packet routing
- File compression
- Centralized identity and access management (Correct answer)
- Real-time malware scanning
Correct answer: Centralized identity and access management
Active Directory provides centralized authentication and authorization services, managing users, computers, groups, and policies across a Windows domain.
Question 31: What is the purpose of a foreign key constraint?
- Enforce referential integrity between tables (Correct answer)
- Create indexes automatically
- Encrypt column data
- Auto-increment values
Correct answer: Enforce referential integrity between tables
Foreign keys ensure values in one table match existing values in the referenced table.
Question 32: What is composition over inheritance?
- Multiple inheritance
- Favoring has-a relationships over is-a relationships for code reuse (Correct answer)
- Composing interfaces
- Using constructors over factories
Correct answer: Favoring has-a relationships over is-a relationships for code reuse
Composition uses contained objects for behavior rather than extending classes.
Question 33: What is the difference between symmetric and asymmetric encryption?
- No practical difference
- Symmetric uses one shared key; asymmetric uses a public-private key pair (Correct answer)
- Asymmetric is for storage only
- Symmetric is stronger
Correct answer: Symmetric uses one shared key; asymmetric uses a public-private key pair
Symmetric uses the same key for both operations; asymmetric uses a mathematically related key pair.
Question 34: What is continuous integration (CI)?
- Deploying code directly to production
- Monitoring production performance
- Managing project documentation
- Frequently merging code changes with automated builds and tests (Correct answer)
Correct answer: Frequently merging code changes with automated builds and tests
CI involves frequently integrating code with automated builds and tests to detect issues early.
Question 35: Consider a `DatabaseConnection` class. The user of this class only needs to know about methods like `connect()`, `query()`, and `disconnect()`. The complex internal details, such as managing network sockets, handling authentication protocols, and managing data buffers, are hidden from the user. Which OOP principle is most evident here?
- Inheritance
- Encapsulation
- Abstraction (Correct answer)
- Polymorphism
Correct answer: Abstraction
Abstraction is the concept of hiding complex implementation details and showing only the essential features of the object. It focuses on what an object does rather than how it does it. The user interacts with a simplified interface without needing to understand the underlying complexity.
Question 36: Which of the following best describes the primary goal of regression testing in a software quality assurance process?
- To test the performance and response time of the application under heavy user traffic.
- To validate the graphical user interface and overall user experience against design specifications.
- To verify that newly implemented features meet the specified user requirements.
- To ensure that recent code changes or bug fixes have not adversely affected existing features. (Correct answer)
Correct answer: To ensure that recent code changes or bug fixes have not adversely affected existing features.
Regression testing is specifically designed to uncover new bugs in existing functionality after a change, such as a bug fix or feature addition. Its purpose is to ensure that the existing, previously tested software still performs correctly.
Question 37: Which Agile ceremony focuses on process improvement?
- Daily Standup
- Sprint Planning
- Sprint Review
- Sprint Retrospective (Correct answer)
Correct answer: Sprint Retrospective
The Retrospective is for reflecting on what went well and what to improve.
Question 38: A KPI dashboard shows sales are 15% below target. Which analytical step should be taken next to investigate further?
- Diagnostic analysis to identify root causes of the shortfall (Correct answer)
- Descriptive analysis to create another summary report
- Prescriptive analysis to automate a corrective action
- Predictive analysis to forecast next quarter's sales
Correct answer: Diagnostic analysis to identify root causes of the shortfall
Diagnostic analysis answers 'why did it happen' by drilling down into data to uncover root causes of a deviation from targets.
Question 39: In the OSPF routing protocol, what is the primary purpose of electing a Designated Router (DR) on a multi-access network segment like Ethernet?
- To reduce the number of adjacencies and routing updates exchanged. (Correct answer)
- To act as the sole default gateway for all hosts on the network.
- To encrypt all routing information shared on the segment.
- To assign IP addresses to other routers on the segment.
Correct answer: To reduce the number of adjacencies and routing updates exchanged.
On multi-access networks (like Ethernet), many routers can be connected. Without a DR, every router would need to form a full adjacency with every other router, leading to a high volume of redundant Link State Advertisements (LSAs). The DR acts as a central point for updates; all other routers form an adjacency with the DR, which then distributes the updates, significantly reducing protocol traffic and processing overhead.
Question 40: What is the difference between clustered and non-clustered indexes?
- Clustered use hash storage
- Non-clustered cannot be on primary keys
- Clustered determines physical row order; non-clustered creates a separate structure (Correct answer)
- Clustered are faster for all queries
Correct answer: Clustered determines physical row order; non-clustered creates a separate structure
A clustered index sorts actual data rows; a non-clustered index creates a separate lookup structure.
IKM Skills Assessment
The IKM assessment is an adaptive knowledge measurement test used by employers to evaluate technical proficiency across IT, finance, and workforce skills.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds