NESCO — Manager (Software) Written Test: 2018প্রশ্ন ও সমাধান

Definition: Extreme Programming (XP) is an agile software development methodology that takes proven good engineering practices — code review, testing, simplicity, communication — to their logical extreme, aiming for high quality and rapid response to changing requirements.

Core practices:

• Pair Programming — two developers work at one workstation, one coding and one reviewing in real time.
• Test-Driven Development (TDD) — write the automated test before writing the code that satisfies it.
• Continuous Integration — merge and build code frequently (multiple times a day) to catch integration issues early.
• Simple Design / YAGNI ("You Aren't Gonna Need It") — build only what is needed now, refactor as requirements grow.
• Frequent, small releases and close, continuous customer collaboration.

graph LR
  A[Release Plan] --> B[Iteration Plan]
  B --> C[Pair Programming + TDD]
  C --> D[Continuous Integration]
  D --> E[Acceptance Test]
  E --> F[Customer Feedback]
  F --> B

Best suited for: small teams, projects with rapidly changing requirements, and R&D-style projects where face-to-face communication is easy to maintain.

Exam takeaway: XP is a specific agile flavor emphasizing engineering discipline (TDD, pair programming, CI) more heavily than Scrum's process/role focus.

Definition: ransomware is malware that encrypts a victim's files (or locks the system) and demands a ransom payment — commonly in cryptocurrency — in exchange for the decryption key.

graph LR
  A["Initial Access: phishing email, malicious attachment, exploited RDP"] --> B[Malware Dropped & Executed]
  B --> C[Lateral Movement across network]
  C --> D[Files Encrypted]
  D --> E[Ransom Note Demanding Payment]

How it typically spreads:

• Phishing/spam attachments disguised as trusted files, tricking the user into opening them.
• Exploiting unpatched vulnerabilities (e.g., exposed RDP or unpatched services) without needing any user action.
• Once inside, it often moves laterally to other machines before triggering encryption, to maximize damage.

Countermeasures:

• Regular, offline/immutable backups so files can be restored without paying.
• Timely patching of OS and software to close exploited vulnerabilities.
• Email filtering and user training against phishing.
• Network segmentation to limit lateral movement.

Exam takeaway: ransomware's defining trait is that it holds data hostage via encryption rather than stealing it outright — the best defense is prevention (patching, training) plus reliable backups so the ransom demand becomes irrelevant.