MIS 200 Midterm Exam Prep Document | 2026/2027 Edition |
250 Verified Questions
MIS 200 Midterm Exam 2026-2027 QUESTIONS AND ANSWERS ALREADY GRADED A+. 100% Verified
Solutions | Updated Per Latest Guidelines | Graded A+
This comprehensive exam preparation guide for Drexel University's MIS 200 course covers all key
topics for the midterm exam in the 2026/2027 academic year. It includes 250 verified questions with
detailed rationales and distractor explanations to ensure a deep understanding of management
information systems. Designed for undergraduate business and MIS students, this resource aligns with
the latest LeBow College of Business curriculum and exam guidelines. Master the concepts of IT
infrastructure, data management, and business intelligence with confidence.
Key Features:
Information Systems in Organizations
IT Infrastructure and Hardware/Software
Database Management and SQL
Networking and Telecommunications
Business Intelligence and Analytics
Security, Ethics, and Privacy
Updates for 2026:
- Updated to reflect 2026/2027 academic year curriculum changes
- Incorporated new case studies on cloud computing and big data
- Enhanced rationales with step-by-step problem-solving approaches
- Added coverage of recent cybersecurity frameworks and compliance standards
- Revised distractor explanations to address common student misconceptions
Abstract:
This document provides a rigorous preparation tool for the MIS 200 midterm examination at Drexel University's
LeBow College of Business. The 250 verified questions span the full scope of the course, including foundational
concepts of information systems, hardware and software infrastructure, database management with SQL,
networking fundamentals, and business intelligence. Each question is accompanied by a detailed rationale
explaining the correct answer and a thorough analysis of distractors, promoting critical thinking and application
of theoretical knowledge. The content is aligned with the 2026/2027 syllabus and incorporates contemporary
issues such as cloud computing, cybersecurity, and data analytics. Designed for undergraduate business and MIS
majors, this resource emphasizes the strategic role of IT in organizational decision-making and operational
efficiency. By engaging with these materials, students will develop a robust understanding of how information
systems drive competitive advantage and support business processes. The structured format, including content area
breakdowns and weightings, allows for targeted study and self-assessment. This guide is an essential companion
for achieving a top grade in MIS 200.
Keywords:
MIS 200, Drexel University, LeBow College of Business, midterm exam, information systems, database
management, business intelligence, IT infrastructure
Answer Format:
Each question is followed by the correct answer and a comprehensive rationale that explains the underlying
concepts and reasoning. Distractor explanations are provided for incorrect options, clarifying common errors and
reinforcing learning. This format ensures that students not only know the right answer but understand why it is
correct and why others are not.
Page 1
,Compliance Checklist:
Aligned with Drexel University MIS 200 2026/2027 syllabus
250 verified questions with accurate answers
Detailed rationales and distractor explanations for each question
Covers all major content areas with specified weightings
Updated to include latest industry trends and academic guidelines
Suitable for self-study and exam review
Content Area Overview:
Content Area Questions Key Topics Weight
Information Systems in 1-50 Types of IS, strategic role, business 20%
Organizations processes, competitive advantage
IT Infrastructure: Hardware and 51-100 Computer hardware, software categories, 20%
Software operating systems, cloud computing
Database Management and SQL 101-150 Relational databases, SQL queries, data 20%
normalization, data warehouses
Networking and 151-200 Network topologies, protocols, wireless, 20%
Telecommunications internet, IoT
Business Intelligence and 201-225 BI tools, data mining, visualization, decision 10%
Analytics support systems
Security, Ethics, and Privacy 226-250 Cybersecurity threats, controls, ethical 10%
issues, privacy laws
Page 2
,Q1. A multinational corporation implements a cloud-based ERP system to integrate its global
supply chain. Which of the following is the most significant challenge in ensuring data consistency
across subsidiaries with different regulatory environments?
A. Latency in data replication due to geographic distance
B. Variations in data privacy laws affecting data storage and processing
C. Incompatibility of legacy systems with cloud APIs
D. High cost of bandwidth for real-time synchronization
Correct Answer: B. Variations in data privacy laws affecting data storage and processing
Rationale: Data privacy regulations (e.g., GDPR, CCPA) impose restrictions on cross-border data flows
and storage, making compliance the primary challenge for data consistency. While latency, legacy
incompatibility, and bandwidth costs are technical issues, they are secondary to legal constraints that can
halt data sharing entirely.
Why Wrong:
A - Latency affects speed but not consistency; eventual consistency models can handle delays.
C - Legacy incompatibility is a technical hurdle but can be addressed with middleware; it does not
fundamentally prevent data consistency.
D - Bandwidth cost is a financial consideration, not a consistency challenge; data can be batched.
Reference: Laudon, K.C. & Laudon, J.P. (2026). Management Information Systems, 17th Ed., Ch. 9
Q2. In designing a relational database for a university enrollment system, a student can register for
multiple courses, and each course can have multiple students. A third entity 'Enrollment' includes
attributes 'grade' and 'semester'. Which normal form is violated if the 'Enrollment' table contains
'student_name' and 'course_title' in addition to foreign keys?
A. First normal form (1NF)
B. Second normal form (2NF)
C. Third normal form (3NF)
D. Boyce-Codd normal form (BCNF)
Correct Answer: C. Third normal form (3NF)
Rationale: Including 'student_name' (dependent on student_id) and 'course_title' (dependent on
course_id) introduces transitive dependencies: student_id -> student_name, course_id -> course_title.
These attributes are not fully dependent on the composite key (student_id, course_id), violating 3NF. The
table is in 2NF because there is no partial dependency (all non-key attributes depend on the whole key).
Why Wrong:
A - 1NF requires atomic values; the table has atomic columns, so it is in 1NF.
B - 2NF prohibits partial dependencies, but student_name and course_title depend on the entire
composite key (student_id, course_id), not part of it.
D - BCNF is stricter than 3NF; the violation here is transitive, which is a 3NF issue, not BCNF
specifically.
Reference: Coronel, C. & Morris, S. (2026). Database Systems: Design, Implementation, & Management,
14th Ed., Ch. 6
Page 3
, Q3. A retail company uses a decision support system (DSS) to optimize inventory levels. The DSS
incorporates a linear programming model. Which type of DSS capability is primarily being
utilized?
A. What-if analysis
B. Goal-seeking analysis
C. Optimization analysis
D. Sensitivity analysis
Correct Answer: C. Optimization analysis
Rationale: Linear programming is a mathematical method for determining the best outcome (maximum
profit or minimum cost) given constraints. This is optimization analysis. What-if analysis changes input
values to see effects; goal-seeking sets a target and works backward; sensitivity analysis examines how
changes in one variable affect the solution.
Why Wrong:
A - What-if analysis involves manual adjustment of inputs, not automated optimization.
B - Goal-seeking finds input values to achieve a desired output, not the optimal output.
D - Sensitivity analysis tests the robustness of the solution, not the optimization itself.
Reference: Turban, E. et al. (2026). Decision Support and Business Intelligence Systems, 10th Ed., Ch. 4
Q4. A company adopts a zero-trust security model. Which of the following policies is most consistent
with this approach?
A. All employees are granted access to the corporate network after successful VPN authentication.
B. Access to internal resources is granted based on user identity, device health, and context, with
continuous verification.
C. Firewalls are placed only at the network perimeter to block external threats.
D. Users are required to change passwords every 90 days and use multi-factor authentication.
Correct Answer: B. Access to internal resources is granted based on user identity, device health, and
context, with continuous verification.
Rationale: Zero trust assumes no implicit trust; it requires verification for every access request,
regardless of location. Option B explicitly includes identity, device health, and context with continuous
verification. Option A still trusts after VPN; option C relies on perimeter; option D is a good practice but
not zero trust (which requires granular, per-request verification).
Why Wrong:
A - VPN authentication grants network-level access, violating the 'never trust, always verify'
principle.
C - Zero trust eliminates the concept of a trusted internal network; perimeter firewalls are
insufficient.
D - Password changes and MFA are components but do not constitute a zero-trust architecture
without continuous verification.
Reference: Stallings, W. (2026). Network Security Essentials, 6th Ed., Ch. 11
Page 4
250 Verified Questions
MIS 200 Midterm Exam 2026-2027 QUESTIONS AND ANSWERS ALREADY GRADED A+. 100% Verified
Solutions | Updated Per Latest Guidelines | Graded A+
This comprehensive exam preparation guide for Drexel University's MIS 200 course covers all key
topics for the midterm exam in the 2026/2027 academic year. It includes 250 verified questions with
detailed rationales and distractor explanations to ensure a deep understanding of management
information systems. Designed for undergraduate business and MIS students, this resource aligns with
the latest LeBow College of Business curriculum and exam guidelines. Master the concepts of IT
infrastructure, data management, and business intelligence with confidence.
Key Features:
Information Systems in Organizations
IT Infrastructure and Hardware/Software
Database Management and SQL
Networking and Telecommunications
Business Intelligence and Analytics
Security, Ethics, and Privacy
Updates for 2026:
- Updated to reflect 2026/2027 academic year curriculum changes
- Incorporated new case studies on cloud computing and big data
- Enhanced rationales with step-by-step problem-solving approaches
- Added coverage of recent cybersecurity frameworks and compliance standards
- Revised distractor explanations to address common student misconceptions
Abstract:
This document provides a rigorous preparation tool for the MIS 200 midterm examination at Drexel University's
LeBow College of Business. The 250 verified questions span the full scope of the course, including foundational
concepts of information systems, hardware and software infrastructure, database management with SQL,
networking fundamentals, and business intelligence. Each question is accompanied by a detailed rationale
explaining the correct answer and a thorough analysis of distractors, promoting critical thinking and application
of theoretical knowledge. The content is aligned with the 2026/2027 syllabus and incorporates contemporary
issues such as cloud computing, cybersecurity, and data analytics. Designed for undergraduate business and MIS
majors, this resource emphasizes the strategic role of IT in organizational decision-making and operational
efficiency. By engaging with these materials, students will develop a robust understanding of how information
systems drive competitive advantage and support business processes. The structured format, including content area
breakdowns and weightings, allows for targeted study and self-assessment. This guide is an essential companion
for achieving a top grade in MIS 200.
Keywords:
MIS 200, Drexel University, LeBow College of Business, midterm exam, information systems, database
management, business intelligence, IT infrastructure
Answer Format:
Each question is followed by the correct answer and a comprehensive rationale that explains the underlying
concepts and reasoning. Distractor explanations are provided for incorrect options, clarifying common errors and
reinforcing learning. This format ensures that students not only know the right answer but understand why it is
correct and why others are not.
Page 1
,Compliance Checklist:
Aligned with Drexel University MIS 200 2026/2027 syllabus
250 verified questions with accurate answers
Detailed rationales and distractor explanations for each question
Covers all major content areas with specified weightings
Updated to include latest industry trends and academic guidelines
Suitable for self-study and exam review
Content Area Overview:
Content Area Questions Key Topics Weight
Information Systems in 1-50 Types of IS, strategic role, business 20%
Organizations processes, competitive advantage
IT Infrastructure: Hardware and 51-100 Computer hardware, software categories, 20%
Software operating systems, cloud computing
Database Management and SQL 101-150 Relational databases, SQL queries, data 20%
normalization, data warehouses
Networking and 151-200 Network topologies, protocols, wireless, 20%
Telecommunications internet, IoT
Business Intelligence and 201-225 BI tools, data mining, visualization, decision 10%
Analytics support systems
Security, Ethics, and Privacy 226-250 Cybersecurity threats, controls, ethical 10%
issues, privacy laws
Page 2
,Q1. A multinational corporation implements a cloud-based ERP system to integrate its global
supply chain. Which of the following is the most significant challenge in ensuring data consistency
across subsidiaries with different regulatory environments?
A. Latency in data replication due to geographic distance
B. Variations in data privacy laws affecting data storage and processing
C. Incompatibility of legacy systems with cloud APIs
D. High cost of bandwidth for real-time synchronization
Correct Answer: B. Variations in data privacy laws affecting data storage and processing
Rationale: Data privacy regulations (e.g., GDPR, CCPA) impose restrictions on cross-border data flows
and storage, making compliance the primary challenge for data consistency. While latency, legacy
incompatibility, and bandwidth costs are technical issues, they are secondary to legal constraints that can
halt data sharing entirely.
Why Wrong:
A - Latency affects speed but not consistency; eventual consistency models can handle delays.
C - Legacy incompatibility is a technical hurdle but can be addressed with middleware; it does not
fundamentally prevent data consistency.
D - Bandwidth cost is a financial consideration, not a consistency challenge; data can be batched.
Reference: Laudon, K.C. & Laudon, J.P. (2026). Management Information Systems, 17th Ed., Ch. 9
Q2. In designing a relational database for a university enrollment system, a student can register for
multiple courses, and each course can have multiple students. A third entity 'Enrollment' includes
attributes 'grade' and 'semester'. Which normal form is violated if the 'Enrollment' table contains
'student_name' and 'course_title' in addition to foreign keys?
A. First normal form (1NF)
B. Second normal form (2NF)
C. Third normal form (3NF)
D. Boyce-Codd normal form (BCNF)
Correct Answer: C. Third normal form (3NF)
Rationale: Including 'student_name' (dependent on student_id) and 'course_title' (dependent on
course_id) introduces transitive dependencies: student_id -> student_name, course_id -> course_title.
These attributes are not fully dependent on the composite key (student_id, course_id), violating 3NF. The
table is in 2NF because there is no partial dependency (all non-key attributes depend on the whole key).
Why Wrong:
A - 1NF requires atomic values; the table has atomic columns, so it is in 1NF.
B - 2NF prohibits partial dependencies, but student_name and course_title depend on the entire
composite key (student_id, course_id), not part of it.
D - BCNF is stricter than 3NF; the violation here is transitive, which is a 3NF issue, not BCNF
specifically.
Reference: Coronel, C. & Morris, S. (2026). Database Systems: Design, Implementation, & Management,
14th Ed., Ch. 6
Page 3
, Q3. A retail company uses a decision support system (DSS) to optimize inventory levels. The DSS
incorporates a linear programming model. Which type of DSS capability is primarily being
utilized?
A. What-if analysis
B. Goal-seeking analysis
C. Optimization analysis
D. Sensitivity analysis
Correct Answer: C. Optimization analysis
Rationale: Linear programming is a mathematical method for determining the best outcome (maximum
profit or minimum cost) given constraints. This is optimization analysis. What-if analysis changes input
values to see effects; goal-seeking sets a target and works backward; sensitivity analysis examines how
changes in one variable affect the solution.
Why Wrong:
A - What-if analysis involves manual adjustment of inputs, not automated optimization.
B - Goal-seeking finds input values to achieve a desired output, not the optimal output.
D - Sensitivity analysis tests the robustness of the solution, not the optimization itself.
Reference: Turban, E. et al. (2026). Decision Support and Business Intelligence Systems, 10th Ed., Ch. 4
Q4. A company adopts a zero-trust security model. Which of the following policies is most consistent
with this approach?
A. All employees are granted access to the corporate network after successful VPN authentication.
B. Access to internal resources is granted based on user identity, device health, and context, with
continuous verification.
C. Firewalls are placed only at the network perimeter to block external threats.
D. Users are required to change passwords every 90 days and use multi-factor authentication.
Correct Answer: B. Access to internal resources is granted based on user identity, device health, and
context, with continuous verification.
Rationale: Zero trust assumes no implicit trust; it requires verification for every access request,
regardless of location. Option B explicitly includes identity, device health, and context with continuous
verification. Option A still trusts after VPN; option C relies on perimeter; option D is a good practice but
not zero trust (which requires granular, per-request verification).
Why Wrong:
A - VPN authentication grants network-level access, violating the 'never trust, always verify'
principle.
C - Zero trust eliminates the concept of a trusted internal network; perimeter firewalls are
insufficient.
D - Password changes and MFA are components but do not constitute a zero-trust architecture
without continuous verification.
Reference: Stallings, W. (2026). Network Security Essentials, 6th Ed., Ch. 11
Page 4
