Combined 3 Banks/FI, AE(IT)/ AME, 2024ok

Combined 3 Banks & Financial Institution

Post: Assistant Engineer(IT)/ AME
Job ID: 10199; Exam Date: 24.02.2024

1. Difference between Multi computer system and multi computer processor. What I pipelining? Explain 4 stages of the pipeline. Describe PPI.

Difference Between Multiprocessor System and Multicomputer System

Definition: Multiprocessor = multiple CPUs sharing a single memory; Multicomputer = multiple independent computers connected via network.
Memory: Multiprocessor uses shared memory; Multicomputer uses distributed memory.
Communication: Multiprocessor uses shared memory; Multicomputer uses message passing.
Coupling: Multiprocessor is tightly coupled; Multicomputer is loosely coupled.
Example: Multiprocessor → Multi-core CPU system; Multicomputer → Cluster system.

Pipelining (Definition)

Pipelining is a technique where multiple instructions are processed simultaneously in different stages of execution.
It increases throughput by overlapping instruction execution.

4 Stages of Pipeline

1. Instruction Fetch (IF): Fetch instruction from memory.
2. Instruction Decode (ID): Decode instruction and identify operands.
3. Execute (EX): Perform operation (ALU processing).
4. Write Back (WB): Store result back to register/memory.

PPI (Parallel Processing Interface)

PPI is a system where multiple processors or units work simultaneously to perform tasks.
It improves performance and speed by dividing tasks into smaller parts.
Used in applications like scientific computing, data processing.

Multiprocessor System এবং Multicomputer System-এর পার্থক্য

সংজ্ঞা: Multiprocessor = একাধিক CPU একটি memory share করে; Multicomputer = একাধিক independent computer network দিয়ে যুক্ত।
Memory: Multiprocessor-এ shared memory; Multicomputer-এ distributed memory।
Communication: Multiprocessor-এ shared memory; Multicomputer-এ message passing।
Coupling: Multiprocessor tightly coupled; Multicomputer loosely coupled।
উদাহরণ: Multiprocessor → multi-core system; Multicomputer → cluster system।

Pipelining (সংজ্ঞা)

Pipelining হলো এমন একটি technique যেখানে একাধিক instruction একই সময়ে ভিন্ন stage-এ process হয়।
এটি throughput বাড়ায় কারণ instruction overlap হয়।

Pipeline-এর ৪টি Stage

1. Instruction Fetch (IF): memory থেকে instruction আনা হয়।
2. Instruction Decode (ID): instruction decode করে operand নির্ধারণ করা হয়।
3. Execute (EX): operation সম্পন্ন করা হয় (ALU কাজ করে)।
4. Write Back (WB): result register বা memory-এ সংরক্ষণ করা হয়।

PPI (Parallel Processing Interface)

PPI হলো এমন একটি system যেখানে একাধিক processor একসাথে parallelভাবে কাজ করে।
এটি কাজকে ভাগ করে performance ও speed বাড়ায়।
ব্যবহার: scientific computing, data processing ইত্যাদি।

2. Differentiate the following terms

Not Found

TCP/IP Model (Tabular Representation)

Types of Network Firewall

Packet Filtering Firewall: Filters packets based on IP, port, protocol.
Stateful Inspection Firewall: Tracks connection state and allows valid traffic.
Proxy Firewall: Acts as intermediary between user and internet.
Application Firewall: Filters traffic at application layer.
Next-Generation Firewall (NGFW): Advanced firewall with deep inspection and security features.

Advantages of NGFW over Traditional Firewall

Deep Packet Inspection: Analyzes full packet content, not just headers.
Application Awareness: Identifies and controls specific applications.
Intrusion Prevention (IPS): Detects and blocks attacks in real-time.
Better Security: Protects against modern threats like malware and phishing.
User-Based Control: Policies based on user identity, not just IP.

Network Firewall-এর ধরন

Packet Filtering Firewall: IP, port অনুযায়ী packet filter করে।
Stateful Firewall: connection state track করে।
Proxy Firewall: user ও internet-এর মাঝে intermediary হিসেবে কাজ করে।
Application Firewall: application layer-এ traffic control করে।
NGFW: advanced security feature সহ modern firewall।

NGFW এর সুবিধা (Traditional Firewall-এর উপর)

Deep Packet Inspection: পুরো packet analyze করতে পারে।
Application Control: specific application control করা যায়।
IPS Support: real-time attack detect ও block করে।
উন্নত Security: malware, phishing থেকে সুরক্ষা দেয়।
User-Based Policy: user অনুযায়ী control করা যায়।

4. Define socket, kernel, process, program, multiprogramming, context switching. Discuss LRU and NRU Page Replacement Algorithms. Illustrate Preemptive Priority scheduling.

Basic Definitions

Socket: Endpoint for communication between two systems over a network (IP + Port).
Kernel: Core part of OS that manages hardware, memory, and processes.
Program: A set of instructions stored on disk.
Process: A program in execution state.
Multiprogramming: Multiple programs kept in memory and CPU switches among them to maximize utilization.
Context Switching: Saving and loading process state when CPU switches from one process to another.

LRU (Least Recently Used) Page Replacement

Replaces the page that was least recently used.
Uses past usage to predict future behavior.
Advantage: Good performance, low page fault rate.
Disadvantage: Requires tracking usage → overhead.

NRU (Not Recently Used) Page Replacement

Classifies pages based on Referenced (R) and Modified (M) bits.
Selects a page from lowest priority class (not recently used).
Advantage: Simple and efficient.
Disadvantage: Less accurate than LRU.

Preemptive Priority Scheduling

CPU is assigned to process with highest priority.
If a new process with higher priority arrives, current process is preempted.

Example:

P1 (Priority 2) is running
P2 (Priority 1, higher) arrives → P1 is stopped
P2 gets CPU immediately

সংজ্ঞা

Socket: network-এ communication-এর endpoint (IP + Port)।
Kernel: OS-এর মূল অংশ যা hardware, memory, process নিয়ন্ত্রণ করে।
Program: disk-এ থাকা instruction-এর সেট।
Process: চলমান program (execution অবস্থায়)।
Multiprogramming: একাধিক program memory-তে রেখে CPU alternately execute করে।
Context Switching: এক process থেকে অন্য process-এ যাওয়ার সময় state save/load করা।

LRU Page Replacement

যে page সবচেয়ে দীর্ঘ সময় ব্যবহার হয়নি সেটি replace করা হয়।
সুবিধা: ভালো performance দেয়।
অসুবিধা: usage track করতে overhead লাগে।

NRU Page Replacement

page-কে Referenced (R) এবং Modified (M) bit দিয়ে classify করা হয়।
কম ব্যবহৃত page replace করা হয়।
সুবিধা: সহজ algorithm।
অসুবিধা: LRU-এর মতো accurate নয়।

Preemptive Priority Scheduling

সবচেয়ে উচ্চ priority process CPU পায়।
নতুন উচ্চ priority process এলে চলমান process stop হয়ে যায়।

উদাহরণ:

P1 (Priority 2) চলছে
P2 (Priority 1, বেশি) এলে → P1 বন্ধ
P2 CPU পায়

5. Describe the transformative power of ICT with ten innovative for the online banking system.

Transformative Power of ICT in Online Banking

24/7 Banking Access: Customers can access banking services anytime, anywhere.
Real-Time Transactions: Instant fund transfer and payment processing.
Mobile Banking Apps: Easy access through smartphones.
Digital Payments: Support for online payments, QR code, e-wallets.
Enhanced Security: Use of encryption, OTP, biometrics for secure transactions.
Automation: Automatic bill payment, account alerts, and statements.
Data Analytics: Banks analyze customer data for better services.
Customer Support: Chatbots and online helpdesk improve service.
Paperless Banking: Reduces paperwork using digital documents.
Global Connectivity: Enables international transactions and services.

Online Banking-এ ICT-এর Transformative Power

২৪/৭ Banking: যেকোনো সময়, যেকোনো স্থান থেকে banking করা যায়।
Real-Time Transaction: তাৎক্ষণিক টাকা transfer ও payment সম্ভব।
Mobile Banking App: smartphone-এর মাধ্যমে সহজে banking করা যায়।
Digital Payment: online payment, QR code, e-wallet ব্যবহারের সুবিধা।
উন্নত Security: encryption, OTP, biometrics ব্যবহার করে নিরাপত্তা নিশ্চিত করা হয়।
Automation: bill payment, alert, statement স্বয়ংক্রিয়ভাবে হয়।
Data Analytics: customer data বিশ্লেষণ করে ভালো service দেওয়া হয়।
Customer Support: chatbot ও online support ব্যবস্থার উন্নতি।
Paperless Banking: digital document ব্যবহার করে কাগজ কম লাগে।
Global Connectivity: আন্তর্জাতিক লেনদেন সহজ হয়।

6. To maintain a data center cooling system sometimes we need a generator. Which type of generator you prefer according to fuel, cost, energy, and budget.

Preferred Generator for Data Center Cooling System

Best Choice:

For a data center cooling backup system, the most practical choice is usually a Diesel Generator.
Diesel generators are widely preferred for emergency and standby power because they start quickly and are reliable for critical backup applications.

Why Diesel Generator is Preferred:

Fuel: Diesel fuel is easy to store on-site, ensuring backup power even if external supply fails.
Cost: Diesel generators are generally more economical for standby use.
Energy / Performance: Provides strong and reliable power for heavy loads like cooling systems.
Budget: Suitable for low to medium budget scenarios.

When Natural Gas Generator Can Be Better:

If you want cleaner operation and already have a reliable gas supply, a Natural Gas Generator can be used.
However, it may have slower startup and depends on continuous gas supply.

Final Recommendation:

Low/Medium Budget + Critical Backup: Diesel Generator
Higher Budget + Cleaner Fuel Preference: Natural Gas Generator

Data Center Cooling System-এর জন্য কোন Generator ভালো

সেরা পছন্দ:

Data center cooling system-এর backup-এর জন্য সাধারণভাবে Diesel Generator সবচেয়ে উপযুক্ত।
Diesel generator সাধারণত emergency ও standby power-এ ব্যবহৃত হয় কারণ এটি দ্রুত start নিতে পারে এবং নির্ভরযোগ্য।

কেন Diesel Generator prefer করা হয়:

Fuel: Diesel fuel site-এ সংরক্ষণ করা যায়, তাই supply বন্ধ হলেও backup চালানো যায়।
Cost: standby use-এর জন্য diesel generator তুলনামূলকভাবে সাশ্রয়ী।
Energy / Performance: heavy load যেমন cooling system সহজে চালাতে পারে।
Budget: কম বা মাঝারি budget-এর জন্য উপযুক্ত।

কখন Natural Gas Generator ভালো হতে পারে:

যদি cleaner fuel এবং reliable gas supply থাকে, তাহলে Natural Gas Generator ব্যবহার করা যায়।
তবে এটি gas supply-এর উপর নির্ভরশীল এবং start হতে সময় বেশি লাগতে পারে।

Final Recommendation:

কম/মাঝারি Budget + Critical Backup: Diesel Generator
বেশি Budget + Cleaner Fuel Preference: Natural Gas Generator

7. Your bank has an online banking system and this process is performed by sending OTP in mobile or OTP in mail when a customer transfers money from mobile banking app or online. This is a secured policy. Without this biometric policy how you can more secure your online banking. Explain your strategy.

Strategy to Secure Online Banking without Biometric

1. Multi-Factor Authentication (MFA)

Use Password + OTP + Security Questions instead of single factor.

2. Strong Password Policy

Enforce complex passwords (length, special characters, expiry).

3. Device Binding

Allow login only from registered devices.

4. Transaction Limits & Alerts

Set daily transaction limits and send instant SMS/email alerts.

5. End-to-End Encryption

Use SSL/TLS encryption to protect data in transit.

6. Behavioral Monitoring

Detect unusual activity (location, time, device) using AI/analytics.

7. Session Management

Auto logout after inactivity and use secure session tokens.

8. CAPTCHA & Anti-Phishing

Prevent bots using CAPTCHA and educate users about phishing.

9. Regular Security Audits

Perform penetration testing and vulnerability assessment.

10. Secure API & Backend

Protect APIs using authentication, rate limiting, firewall.

Biometric ছাড়া Online Banking নিরাপদ করার Strategy

1. Multi-Factor Authentication (MFA)

Password + OTP + Security Question ব্যবহার করা।

2. Strong Password Policy

complex password বাধ্যতামূলক করা (length, special character)।

3. Device Binding

শুধু registered device থেকে login করার অনুমতি।

4. Transaction Limit & Alert

daily limit নির্ধারণ এবং instant alert পাঠানো।

5. Encryption

SSL/TLS ব্যবহার করে data secure রাখা।

6. Behavioral Monitoring

অস্বাভাবিক activity detect করতে AI/analytics ব্যবহার।

7. Session Management

inactive হলে auto logout এবং secure session ব্যবহার।

8. CAPTCHA & Anti-Phishing

CAPTCHA ব্যবহার এবং phishing সম্পর্কে সচেতনতা।

9. Security Audit

নিয়মিত penetration testing করা।

10. Secure API

authentication, rate limiting, firewall দিয়ে API secure করা।

8. Draw logic circuit for the Boolean Expression Q= (A’B + BC (B+C)’)’ and find value of Q when (A, B, C) = (1, 0, 1).

(A’B+BC(B+C)’)’

∘ Substitute the values A = 1, B = 0, C = 1 into the equation.

= (1’·0+0·1(0+1)’)’

∘ The complement of 1 is 0. Replace 1′ with 0.

= (0·0+0·1(0+1)’)’

∘ 0+1 is equal to 1.

= (0·0+0·1·1′)’

∘ The complement of 1 is 0. Replace 1′ with 0.

= (0·0+0·1·0)’

∘ 0·0 is equal to 0.

= (0+0·1·0)’

∘ 0·1·0 is equal to 0.

= (0+0)’

∘ 0+0 is equal to 0.

= 0′

∘ The complement of 0 is 1. Replace 0′ with 1.

= 1

9. Your bank wants to transform your full data center into a cloud. Now sketch your strategy and plan to implicate this procedure.

1. Assessment & Planning

Analyze current applications, servers, databases, and workloads
Identify which systems are suitable for cloud migration
Define goals: cost reduction, scalability, security, compliance

2. Choose Cloud Model

Select Public, Private, or Hybrid Cloud (Banking usually prefers Hybrid Cloud)
Choose cloud providers (e.g., AWS, Azure, GCP)

3. Virtualization & Consolidation

Convert physical servers into virtual machines (VMs)
Use hypervisors to optimize resource usage

4. Migration Strategy

Lift and Shift: Move existing apps directly
Re-platform: Optimize apps for cloud
Re-architect: Redesign critical applications

5. Security & Compliance

Implement encryption, firewalls, IAM, Zero Trust
Ensure compliance with banking regulations (data privacy, audit)

6. Network & Connectivity

Set up secure VPN / dedicated connections
Ensure high-speed and reliable communication

7. Automation & Management

Use cloud management tools, DevOps, CI/CD
Enable auto-scaling and monitoring

8. Backup & Disaster Recovery

Implement cloud backup, replication, failover
Ensure business continuity

9. Testing & Deployment

Test performance, security, and reliability
Gradually migrate services (pilot → full deployment)

10. Training & Optimization

Train IT staff on cloud technologies
Continuously optimize cost, performance, and security

Bank Data Center-কে Cloud-এ রূপান্তরের পরিকল্পনা

1. Assessment ও Planning

বর্তমান server, application, database বিশ্লেষণ করা
কোনগুলো cloud-এ যাবে তা নির্ধারণ করা

2. Cloud Model নির্বাচন

Public / Private / Hybrid Cloud নির্বাচন (Bank-এর জন্য Hybrid বেশি উপযুক্ত)

3. Virtualization

Physical server → VM-এ রূপান্তর

4. Migration

Lift & Shift, Re-platform, Re-architect পদ্ধতি ব্যবহার

5. Security

Encryption, Firewall, Access Control নিশ্চিত করা

6. Network

Secure connection (VPN) ব্যবহার করা

7. Automation

Monitoring, Auto-scaling ব্যবহার করা

8. Backup

Backup ও disaster recovery নিশ্চিত করা

9. Testing

ধাপে ধাপে migration ও testing করা

10. Training

IT team-কে cloud training দেওয়া

10. Your bank wants to secure an e-banking online system and wants to configure a web server in your data center. What kind of tools and technology you use for this?

Secure Web Server: Use Apache, Nginx, or IIS with proper hardening and regular updates.
SSL/TLS Certificate: Enable HTTPS to encrypt data between user and server.
Firewall: Use network firewall to control incoming and outgoing traffic.
Web Application Firewall (WAF): Protect web applications from SQL Injection, XSS, and malicious requests.
IDS/IPS: Use Intrusion Detection System and Intrusion Prevention System to detect and block attacks.
Authentication System: Apply MFA, OTP, strong password policy, and RBAC.
Database Security: Use encryption, access control, backup, and audit logs.
Load Balancer: Distribute traffic and improve availability and performance.
SIEM & Monitoring: Use tools like Splunk, ELK, or QRadar for log monitoring and alerting.
Backup & Disaster Recovery: Maintain regular backup, replication, and failover system.
Patch Management: Regularly update OS, web server, database, and application.

Secure Web Server: Apache, Nginx বা IIS ব্যবহার করা এবং regular update রাখা।
SSL/TLS Certificate: user ও server-এর মধ্যে data encrypt করতে HTTPS enable করা।
Firewall: incoming ও outgoing traffic control করতে network firewall ব্যবহার করা।
Web Application Firewall (WAF): SQL Injection, XSS এবং malicious request থেকে web application protect করা।
IDS/IPS: attack detect ও block করতে Intrusion Detection System এবং Intrusion Prevention System ব্যবহার করা।
Authentication System: MFA, OTP, strong password policy এবং RBAC ব্যবহার করা।
Database Security: encryption, access control, backup এবং audit log রাখা।
Load Balancer: traffic distribute করে availability ও performance বৃদ্ধি করা।
SIEM ও Monitoring: Splunk, ELK বা QRadar দিয়ে log monitor ও alert করা।
Backup ও Disaster Recovery: regular backup, replication এবং failover system রাখা।
Patch Management: OS, web server, database এবং application নিয়মিত update করা।

11 What is policy, guideline and procedure? Why should the auditor maintain control as policy? Explain different types of audit risks that the auditor should follow when he will audit.

Policy, Guideline and Procedure

Policy: High-level rules and principles set by an organization to guide decisions.
Guideline: Recommended practices that provide direction but are flexible.
Procedure: Step-by-step instructions to perform a specific task.

Why Auditor Maintains Control as Policy

Consistency: Ensures all activities follow standard rules.
Compliance: Helps meet legal and regulatory requirements.
Risk Reduction: Minimizes chances of fraud, error, or misuse.
Accountability: Defines roles and responsibilities clearly.
Audit Trail: Provides documented evidence for verification.

Types of Audit Risks

Inherent Risk: Risk of error due to nature of business without controls.
Control Risk: Risk that internal controls fail to detect/prevent errors.
Detection Risk: Risk that auditor fails to detect existing errors.

Policy, Guideline এবং Procedure

Policy: প্রতিষ্ঠানের উচ্চ-স্তরের নিয়ম ও নীতি যা decision নিতে সাহায্য করে।
Guideline: কিছু recommended নিয়ম যা অনুসরণ করা ভালো, তবে flexible।
Procedure: নির্দিষ্ট কাজ করার step-by-step নির্দেশনা।

Auditor কেন Policy হিসেবে Control বজায় রাখে

Consistency: সব কাজ একই নিয়মে করা নিশ্চিত করে।
Compliance: আইন ও নিয়ম মেনে চলা সহজ হয়।
Risk কমানো: fraud বা ভুলের সম্ভাবনা কমায়।
Accountability: দায়িত্ব পরিষ্কারভাবে নির্ধারণ করে।
Audit Trail: যাচাইয়ের জন্য প্রমাণ সংরক্ষণ থাকে।

Audit Risk-এর ধরন

Inherent Risk: ব্যবসার স্বাভাবিক ঝুঁকি যেখানে control নেই।
Control Risk: internal control error ধরতে ব্যর্থ হওয়ার ঝুঁকি।
Detection Risk: auditor error detect করতে ব্যর্থ হওয়ার ঝুঁকি।

General Part

12-14 Math Question 20 marks

15. B2E Translation (10)

16. Focus: Effect of air pollution on human health.10

17. English to Bengali translation. 10

Leave a Comment Cancel Reply

You must be logged in to post a comment.

Field Based Job Solution Topic Based QnS IT Job News / Circular

Combined 3 Banks & Financial Institution Post: Assistant Engineer(IT)/ AME Job ID: 10199; Exam Date: 24.02.2024

Leave a Comment Cancel Reply

Combined 3 Banks & Financial Institution

Post: Assistant Engineer(IT)/ AME
Job ID: 10199; Exam Date: 24.02.2024