a) Neural Network

• Neural networks are brain-inspired machine learning models that mimic human learning
behavior.

• Comprise input, hidden, and output layers; hidden layers transform input for meaningful
output.

• Ideal for identifying complex patterns beyond human programming capabilities.

• The concept dates back to the 1940s but gained traction with backpropagation, which adjusts
weights based on errors.

• Advancement through deep learning: multilayer networks extract hierarchical features for better
accuracy and learning.

b) Duties of Certifying Authorities

• Must follow legal procedures in issuing digital signatures.

• Ensure all employees comply with the law and digital signature standards.

• Required to display their license publicly and surrender it after suspension or cancellation.

• Must disclose issued digital certificates and maintain transparency.

• (Note: Ideally, should also manage certificate revocation and maintain a public repository – not
explicitly stated in original.)

c) B2C e-Commerce

• Business-to-Consumer (B2C) e-commerce involves businesses directly selling goods/services to

end customers, usually online.

• Transactions occur on the business’s website, where customers select, order, and pay for
products.

• The business processes the order and delivers the product directly to the consumer without
intermediaries.

• Common examples: Amazon, Daraz, Flipkart.

d) Request for Proposal (RFP)

• An RFP is a formal document issued by an organization to invite bids for systems, services, or
equipment.
 • Contains technical specifications, contract terms, payment schedules, and other procurement
details.

• Outlines the submission, evaluation, and selection process for bids.

• The RFP becomes the foundation of the contract between the organization and the chosen
supplier.

e) Challenges of Using Outsourcing for IT Operations

• Confidentiality risks arise from sharing sensitive data with third-party vendors.

• Quality may suffer if the outsourced team lacks proper training or domain knowledge.

• Difficult to find skilled outsourcing partners for niche or specialized IT operations.

• Replacing vendors can be complex due to transition difficulties, including retraining and system
handovers.

• Business operations are vulnerable if the vendor shuts down, faces legal issues, or dissolves.

a) Types of E-Commerce

• Business-to-Business (B2B)

o Involves transactions between companies, such as manufacturers and wholesalers, or

wholesalers and retailers.

o Often deals with bulk sales, supply chains, and long-term contracts.

• Business-to-Consumer (B2C)

o Refers to businesses selling directly to consumers via digital platforms.

o Includes product browsing, online orders, and home delivery.

o Examples: [Link], [Link]

• Consumer-to-Consumer (C2C)

o Consumers sell used goods or services to other consumers using a third-party platform.

o Platforms facilitate the transaction and provide trust mechanisms.

o Example: [Link]

b) Duties of Certifying Authorities

• Must follow prescribed procedures related to issuance of digital signatures.

 • Ensure that employees comply with applicable laws and guidelines.

• Must display license publicly and surrender it if suspended or cancelled.

• Required to disclose issued digital signature certificates.

c) Genetic Algorithm

• Mimics natural selection and mutation to find optimized solutions.

• Starts with a random population of possible solutions.

• Evaluates fitness of each solution to determine suitability.

• Combines and mutates best solutions to create next generation.

• Process is repeated iteratively until the most optimal solution is found.

d) IT Governance

• A system of tools, policies, and processes aligning IT services with business goals.

• Ensures IT delivers value, supports business strategy, and manages risk.

• Helps evaluate IT performance in the context of organizational growth.

• Uses frameworks like COBIT for compliance, efficiency, and business benefits.

• Ensures controlled, effective, and accountable IT operations.

e) Vulnerability Assessment and Penetration Testing (VAPT)

• Vulnerability Assessment (VA):

o Identifies, categorizes, and prioritizes security weaknesses in systems and software.

o Detects flaws but does not exploit them.

• Penetration Testing (PT):

o Involves actively exploiting vulnerabilities to simulate real-world attacks.

o Helps assess how attackers might gain unauthorized access.

• Combined (VAPT) approach offers both detection and exploitation insights, improving overall
system security.

a) Disadvantages of IT Outsourcing
 • Loss of Control: Outsourcing transfers control of IT functions to third-party vendors, which can
risk internal oversight.

• Dependency: Over-reliance on external service providers can be risky if they underperform.

• Hidden Costs: Unexpected costs such as contract termination fees or scope changes may arise.

• Long Distance Issues: Outsourcing to distant countries may create time zone and communication
challenges, increasing costs and delays.

b) Cloud Computing

• Definition: Delivery of hosted services (e.g., VM, storage, apps) over the internet, avoiding in-
house infrastructure.

• Key Benefits:

o Self-Service Provisioning: Users can access resources on demand.

o Elasticity: Resources can be scaled up/down as needed.

o Pay-per-Use: Charges based on actual usage.

o Workload Resilience: Redundant systems ensure continuity across global regions.

o Migration Flexibility: Easy movement of workloads across platforms for efficiency.

c) High Availability Planning

• Definition: Planning to ensure business continuity during system failures, disasters, or outages.

• Key Components:

o Infrastructure Design: Server, storage, and network redundancy.

o Disaster Recovery: Backup sites and failover procedures.

o Action Plan: Step-by-step recovery, including who is responsible for what.

o Geographical Redundancy: Ensures services can resume from alternate locations.

d) B2C e-Commerce

• Definition: Direct online selling of goods/services from business to end consumers.

• Process:

o Consumers access business websites, select products, place orders.

o Businesses receive orders and dispatch goods directly.

 • Examples: Online retail stores like Daraz, Jeevee, etc.

e) Categories of Application Controls

• Objective: Ensure data input, processing, and output are accurate, complete, and authorized.

• Types:

o Input Controls: Validate integrity and validity of entered data.

o Processing Controls: Ensure accuracy and completeness during processing.

o Output Controls: Confirm output matches expected results.

o Integrity Controls: Monitor stored/processed data for consistency.

o Management Trail: Track transaction lifecycle and assess control effectiveness.

a) High Availability Computing

• Ensures continuous operation of business-critical systems despite disruptions (natural or man-

made).

• Achieved through hardware and software redundancy like:

o Clustered, multi-node setups across geographic locations

o Automatic failover, data replication (RAID, mirroring)

• Supports 24/7 availability by avoiding single points of failure.

• Redundant resources include:

o Power supplies, UPS, diesel generators

o Cooling systems and multiple network connections

b) PERT (Program Evaluation Review Technique)

• A project management tool used to estimate time and resources for completing a project.

• Visualized using charts with nodes and vectors to show tasks and dependencies.

• Helps in identifying:

o Task sequencing and dependencies

o Critical path (minimum time to complete project)

• Enables project managers to estimate time, resources, and budget.

• Useful for identifying parallel and dependent tasks.

c) Distinction between Network Access Control and Application Control

• Network Access Control (NAC)

o Controls external access to systems through network (intranet/internet).

o Implemented via access policies, firewalls, secure credentials.

o Focused on controlling who connects and what data flows through the network.

• Application Control

o Restricts which applications users can access and use.

o Example: Limiting use of social media or allowing only specific software (e.g. CRM,
email client).

o Ensures compliance with security standards, licenses, and productivity goals.

d) Importance of IS Audit

• IS Audit evaluates the health, security, and effectiveness of IT systems.

• Ensures systems are used by the right people with proper privileges.

• Identifies strengths and weaknesses in systems and processes.

• Helps management make informed decisions to improve IT performance and governance.

• Vital for maintaining control, security, and strategic alignment of IT with business goals.

e) Benefits of Personalization in Modern E-Commerce

• Personalization uses user data, behavior, and preferences to tailor offerings.

• Driven by social media, mobile tech, consumer profiling, and AI.

• Helps push relevant products/services, improving customer satisfaction.

• Increases chances of conversion and customer retention.

• Saves time by filtering out irrelevant content, benefiting both user and business.

a) Virtualization and Its Advantages

• Virtualization: Creating virtual versions of computing resources (e.g., servers, operating

systems, networks).
 • Types: Network, Server, Desktop, Hardware, Software, Storage virtualization.

• Advantages:

o Improves resource performance and efficiency (e.g., CPU virtualization).

o Enhances security by isolating virtual machines (VMs).

o Reduces hardware costs and requires less physical infrastructure.

o Increases reliability with better disaster recovery, backup, and data retrieval.

b) Electronic Payment

• Definition: Digital payment mechanism eliminating the need for cash handling.

• Process: Money stored in digital wallets or bank accounts is transferred electronically during
transactions.

• Importance: Key enabler of e-commerce and online trade growth.

• Benefits:

o Faster and more accurate transactions.

o Transparency and ease in record-keeping.

o Simplifies auditing, taxation, and regulatory compliance.

c) Business Applications of Expert Systems

• Used in:

o Decision management.

o Diagnostic and troubleshooting.

o Maintenance scheduling.

o Design and configuration.

o Selection and classification tasks.

o Process monitoring and control.

d) CASE Tools

• Definition: Computer Assisted System Engineering tools automate system development

processes.
 • Functions:

o Reduce development time, cost, and errors.

o Facilitate documentation, team coordination, and communication.

o Provide graphics for charts, screen/report generators, code and documentation generation.

• Benefits: Enforce standards, improve user-technical communication, automate coding, testing,

and rollout.

e) High Availability Planning

• Purpose: Ensure systems and services remain functional and accessible even during disasters or
outages.

• Techniques:

o Redundancy through multiple identical installations, often in different locations.

o Network and power system redundancies.

o Server replication and clustering with automatic switchover for failover.

• Goal: Minimize downtime caused by power outages, network failures, or other disruptions.

a) User Interface Design

• Focuses on designing systems for users with varying IT skills.

• Key for usability and user acceptance; complex interfaces cause resistance.

• Ensures ease, intuitiveness, accuracy, consistency, and data integrity.

• Considers time efficiency for data input and retrieval.

• Involves IT, marketing, and design teams to enhance user experience.

b) General Attributes of Information System Security

• Confidentiality: Only authorized users can access data; unauthorized access denied.

• Integrity: Data remains accurate and unaltered throughout its lifecycle.

• Availability & Access Control: System and data available when needed; right access given to
the right users.

• Non-Repudiation: Prevents denial of actions, ensuring accountability and rejecting false claims.
c) Electronic Fund Transfer (EFT)

• Digital transfer of money between bank accounts without paper documents or bank employees.

• Simple, fast, and direct method replacing paper checks.

• Widely used in business transactions due to cost-effectiveness and speed.

d) e-Governance

• Delivery of government services using IT across government-to-people (G2P), government-to-

business (G2B), government-to-employee (G2E), and government-to-government (G2G).

• Depends on IT infrastructure, internet/mobile coverage, and user capability.

• Improves service efficiency, transparency, and reduces revenue leakage.

• In Nepal, examples include the Nagarik App for service applications and payments.

• Still evolving due to infrastructure and adoption challenges.

e) Liabilities of Network Service Provider (Electronic Transaction Act, 2063)

• Liabilities as per subscriber agreements and provider licenses.

• Other prescribed liabilities by law.

• Not liable for breaches caused by third-party data using their network service or connectivity.

a) Fuzzy Logic

• Deals with reasoning that is approximate rather than fixed and exact.

• Unlike Boolean logic (true = 1, false = 0), fuzzy logic allows intermediate truth values (partially
true/false).

• Useful for handling uncertainty and vagueness in real-world scenarios.

• Applied in controlling machines and consumer products.

• Provides acceptable (not always precise) reasoning useful in engineering.

b) Functions, Duties and Powers of Controller under Electronic Transaction Act, 2063

• Appointed by Government of Nepal with qualified personnel and support staff.

 • Issues licenses to Certifying Authorities (CAs).

• Supervises and monitors Certifying Authorities’ activities.

• Sets standards for digital signature verification by CAs.

• Specifies operational conditions and certificate formats for CAs.

• Maintains public database of certified information.

• Performs other prescribed functions under the Act.

c) Customization of Website

• Tailors user experience based on visitor’s past behavior, location, and preferences.

• Aims to increase customer satisfaction, visit duration, and conversion rates.

• Personalization mimics in-person retail experience online.

• Helps businesses retain visitors, boost sales, and enhance brand reputation.

• Increasingly important with growth of online retail.

d) C2C E-commerce

• Consumer-to-consumer transactions facilitated via electronic platforms.

• Transactions occur directly between individuals using third-party platforms (e.g., Facebook).

• Third parties (digital wallets, courier services) provide support but do not engage in the sale itself.

• Growth driven by social media, digital payments, and delivery services.

• Enables peer-to-peer buying and selling without organizational involvement.

e) XML Standard for Digital Data Exchange

• Extensible Markup Language (XML) is a universal standard for data exchange.

• Enables different systems to communicate via APIs with a clear, structured format.

• Supports flexible, secure data exchange over public networks.

• Compatible with many devices, including handheld and portable ones.

• XML schemas define standardized data structures for interoperability.

• Extensible design allows creation of new tags and data flows.

• Widely adopted for modern cross-platform data exchange.

a) Information System Audit

• Examines management controls within IT infrastructure.

• Evaluates if systems safeguard assets, maintain data integrity, and operate effectively.

• Often part of financial or internal audits.

• Focuses on system availability, security/confidentiality, and data integrity.

• Ensures controls are effective, prevents breaches, and supports organizational goals.

• Important for reducing risks like data loss, tampering, service disruption, and poor IT
management.

b) Business to Customer (B2C) e-Commerce

• Online business transactions between companies and individual customers.

• Businesses provide product/service info on websites.

• Customers browse, order, pay, and receive products remotely.

• Enables convenient shopping without physical store visits.

• Common in retail, increasing accessibility for customers.

c) Mobile Computing

• Technology enabling data, voice, and video transmission via wireless devices without fixed
connections.

• Key components:

o Mobile Communication: Wireless networks, protocols, data formats, bandwidths.

o Mobile Hardware: Devices like smartphones, laptops with network connectivity.

o Mobile Software: Operating systems (Android, iOS, Windows, Linux), and applications
running on devices.

• Supports seamless, on-the-go computing and communication.

d) Dimensions of Feasibility Study of Information System

• Technical Feasibility: Availability and capability of technology, system scalability, security, and
reliability.

• Economic Feasibility: Cost-benefit analysis including technology costs and expected savings.
 • Operational Feasibility: Practicality of system usage within the organization (implied in general
feasibility).

• Schedule Feasibility: Time required to develop and implement the system; timely service
delivery.

• Legal Feasibility: Compliance with laws, regulations, and contractual obligations.

e) Importance of Patents for IT Industry

• Protect intellectual property of inventions and innovations from unauthorized copying.

• Ensure creators receive recognition and rewards for their work.

• Crucial in IT due to ease of copying technology and ideas.

• Patents encourage ongoing innovation by securing legal rights for creators.

• Acts as a catalyst for continued development and improvement in IT and other industries.

a) Executive Information System (EIS)

• Supports top-level executives in long-term policy, strategy, and decision-making.

• Focuses on unstructured decision processes and organizational goals.

• Provides summary reports with ability to drill down into detailed data.

• Enables analysis of business factors affecting performance (e.g., profit changes based on pricing
or incentives).

• Integrates data inputs from operational, supervisory, and middle management systems.

b) Strategic E-Business Planning

• Evaluates benefits and risks of adopting e-business strategies for competitive advantage.

• Uses models to guide planning:

o Competitive Forces Model: competitors, customers, suppliers, new entrants, substitutes.

o Competitive Strategies Model: cost leadership, differentiation, growth, innovation,

alliances.

o Value Chain Model: primary and support activities adding value to products/services.

o Strategic Opportunities Matrix: assesses risk and payoff of e-business initiatives.

c) Business Continuity Plan (BCP)

• Aims to prevent and recover systems from potential threats/disasters.

• Ensures quick system functionality post-disaster (natural or man-made risks).

• Involves risk identification, impact analysis, safeguards implementation, and rigorous testing.

• Integral to organizational risk management strategy.

d) Software as a Service (SaaS)

• Delivers software applications over the Internet as a service.

• Eliminates need for installation or maintenance on user devices.

• Provider manages security, availability, and performance.

• Can be hosted by independent vendors or software vendors themselves (e.g., Microsoft).

• Used by businesses and individuals for various applications, from entertainment (Netflix) to
advanced IT tools.

e) Disk Mirroring (RAID 1)

• Data replication on two or more disks for high availability and performance.

• Read operations are fast as data can be read simultaneously from multiple disks.

• Write operations slower as data must be written twice.

• Provides instant failover if one disk fails, ensuring continuous data access.

• Part of RAID (Redundant Array of Independent Disks) technology; RAID 1 prioritizes reliability.

• Other RAID levels include RAID 0 (fastest) and RAID 5 (balance of speed and reliability).