CAS-001 · Question #177
Customer Need: "We need the system to produce a series of numbers with no discernible mathematical progression for use by our Java based, PKI-enabled, customer facing website." Which of the…
The correct answer is B. The system shall generate a pseudo-random number upon invocation by the existing Java program. The customer requirement describes numbers with 'no discernible mathematical progression' - this is the definition of pseudo-random output (as opposed to sequential or patterned numbers). The requirement is for a Java-based system to generate these numbers on demand. Option B…
Question
Customer Need:
"We need the system to produce a series of numbers with no discernible mathematical progression for use by our Java based, PKI-enabled, customer facing website." Which of the following BEST restates the customer need?
Options
- AThe system shall use a pseudo-random number generator seeded the same every time.
- BThe system shall generate a pseudo-random number upon invocation by the existing Java program.
- CThe system shall generate a truly random number based upon user PKI certificates.
- DThe system shall implement a pseudo-random number generator for use by corporate customers.
How the community answered
(34 responses)- A3% (1)
- B71% (24)
- C18% (6)
- D9% (3)
Explanation
The customer requirement describes numbers with 'no discernible mathematical progression' - this is the definition of pseudo-random output (as opposed to sequential or patterned numbers). The requirement is for a Java-based system to generate these numbers on demand. Option B correctly restates this: a pseudo-random number generator invoked by the existing Java program when needed. Option A is incorrect because seeding a PRNG with the same value every time produces the same sequence, which is deterministic and predictable - the opposite of what is needed. Option C incorrectly specifies 'truly random' numbers (which require a hardware entropy source) and incorrectly ties randomness to PKI certificates, which serve authentication not entropy. Option D omits the critical detail that the PRNG must be invoked by the existing Java program and drops the specificity of 'corporate customers' without addressing the actual integration requirement.
Topics
Community Discussion
No community discussion yet for this question.