PracticeVideosBlogFlashcardsEspañol
All Practice Exams

112+ Free ENADE Análise e Desenvolvimento de Sistemas Practice Questions

Prepare for the ENADE Tecnologia em Análise e Desenvolvimento de Sistemas — Exame Nacional de Desempenho dos Estudantes exam with instant access — no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
112+ Questions
100% Free

Loading practice questions...

Same family resources

Explore More ENADE National Student Performance Examination (Brazil)

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

ENADE Ciência da Computação (Brazil)

Practice Questions

ENADE Design Gráfico (Tecnólogo) (Brazil)

Practice Questions

ENADE Sistemas de Informação (Brazil)

Practice Questions

ENADE Gestão Pública (Tecnólogo) (Brazil)

Practice Questions

ENADE Marketing (Tecnólogo) (Brazil)

Practice Questions

ENADE Pedagogia (Brazil)

Practice Questions
2026 Statistics

Key Facts: ENADE Análise e Desenvolvimento de Sistemas Exam

Lei 10.861/2004

Legal basis (SINAES)

MEC

Portaria 169/2026

Specific component guidelines

INEP

Portaria 154/2026

Formação Geral guidelines

INEP

46 items

15 FG MCQ + 30 CE MCQ + 1 discursive

INEP

4 hours

Official duration

INEP

1 to 5

Conceito Enade scale, no pass mark

75%

Workload threshold for tecnólogo concluinte eligibility

INEP

Portuguese

Official assessment language

ENADE ADS is Brazil's compulsory national capstone assessment for graduating Análise e Desenvolvimento de Sistemas tecnólogo students, run by INEP/MEC: one 4-hour paper in Portuguese with 15 Formação Geral MCQs, 30 specific MCQs, and 1 discursive question, free of charge, with no individual pass mark. This free practice bank is an English-language multiple-choice study adaptation mapped to the objetos de conhecimento of Portaria INEP nº 154/2026 and nº 169/2026 — it is not an official translation or a simulation of the real paper.

Sample ENADE Análise e Desenvolvimento de Sistemas Practice Questions

Try these sample questions to test your ENADE Análise e Desenvolvimento de Sistemas exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 112+ question experience with AI tutoring.

1A Brazilian software development startup is engineering a digital healthcare application that records user telemetry, diagnostic appointments, and vital signs. Under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais - LGPD, Lei nº 13.709/2018), what is the primary legal requirement for processing sensitive health data (dados pessoais sensíveis) when explicit consent is not obtained?
A.Processing is freely permitted as long as the data is stored in cloud servers physically located within Brazilian national territory.
B.Processing may be justified under the legitimate interest (legítimo interesse) of the software controller without restrictions.
C.Processing must strictly fit one of the statutory legal exceptions, such as health protection in procedures performed by health professionals or legal/regulatory compliance.
D.Processing is authorized provided that an informal non-disclosure agreement is signed between the software developers and the database administrators.
Explanation: Under Article 11 of the Brazilian LGPD (Lei nº 13.709/2018), sensitive personal data (such as health or biometric data) cannot be processed under the generic legal basis of 'legitimate interest' (legítimo interesse). In the absence of explicit, specific consent from the data subject (titular dos dados), processing is strictly limited to statutory legal exceptions, including legal or regulatory compliance, public health protection by health professionals or entities, judicial proceedings, and fraud prevention.
2The Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet, Lei nº 12.965/2014) establishes the fundamental principle of Network Neutrality (Neutralidade da Rede) in Article 9. According to this statutory provision, internet access and connection providers are:
A.Obligated to treat all data packets equally, regardless of origin, destination, service, terminal, or application, prohibiting commercial traffic discrimination or degradation.
B.Authorized to prioritize traffic from commercial partners who pay higher bandwidth transit fees during peak hours.
C.Permitted to block competing VoIP and messaging protocols to preserve telecom network infrastructure stability.
D.Required to throttle end-user connection speeds whenever cryptographic protocols are detected in transit.
Explanation: Article 9 of Lei nº 12.965/2014 (Marco Civil da Internet) and its regulating Decree nº 8.771/2016 mandate network neutrality: the party responsible for the transmission, switching, or routing of data packets must treat all packets equally, without distinction by content, origin, destination, service, terminal, or application. Any discrimination or degradation of traffic is strictly exceptional and permitted only for technical operational integrity or emergency services prioritization, never for commercial favoritism.
3When designing a citizen-facing municipal web portal in Brazil, software developers must adhere to the Electronic Government Accessibility Model (Modelo de Acessibilidade em Governo Eletrônico - e-MAG) and WCAG 2.1 guidelines. Which development practice directly ensures non-text content accessibility for visually impaired citizens using screen readers?
A.Embedding all descriptive instructions and navigation links exclusively inside rasterized JPEG images.
B.Providing programmatic text alternatives via meaningful 'alt' attributes for informative images and aria-labels for interactive UI controls.
C.Disabling keyboard focus outlines across the entire stylesheet to maintain a clean visual layout.
D.Using low-contrast light grey text on white backgrounds to reduce digital visual fatigue.
Explanation: Both e-MAG and WCAG 2.1 (Success Criterion 1.1.1 - Non-text Content) require that all non-text elements (such as images, icons, and UI buttons) provide equivalent text alternatives (e.g., descriptive 'alt' attributes or 'aria-label' attributes). This allows assistive technologies, such as screen readers used by visually impaired individuals, to convert graphical information into synthesized speech or braille displays.
4A systems analyst discovering an unpatched critical vulnerability in an operational hospital telemetry system is instructed by management to suppress documentation to avoid audit penalties. According to the Code of Ethics of the Brazilian Computer Society (Código de Ética da Sociedade Brasileira de Computação - SBC), what is the ethical duty of the computing professional?
A.Comply with management orders unconditionally because employment hierarchy supersedes all external ethical guidelines.
B.Publish the zero-day exploit code on public forums immediately before alerting internal system administrators.
C.Delete the system audit logs so that the existence of the vulnerability cannot be traced back to the development team.
D.Prioritize the safety, health, and welfare of the public by formally reporting the risk and advocating for immediate remediation.
Explanation: The SBC Code of Ethics (Código de Ética da Sociedade Brasileira de Computação) explicitly mandates that computing professionals must place the safety, health, and welfare of the public above private or corporate interests. When discovering system flaws that endanger human lives or user safety, the professional has an ethical responsibility to document and formally escalate the risks to ensure corrective actions are taken.
5Under the Brazilian Software Law (Lei do Software, Lei nº 9.609/1998) and its relationship with the Copyright Law (Lei nº 9.610/1998), which legal regime governs the protection of computer software source code in Brazil?
A.Copyright (Direito Autoral), where source code is protected as a literary work, granting automatic protection upon creation for 50 years from January 1st following publication.
B.Industrial patent law exclusively, requiring mandatory prior registration at INPI before any legal ownership exists.
C.Trade secret law exclusively, terminating all legal rights if the source code is inspected by third-party auditors.
D.Public domain by default, requiring special executive decree to claim private software ownership.
Explanation: Under Article 2 of Lei nº 9.609/1998, computer programs are protected under the intellectual property regime applicable to literary works under the Copyright Law (Lei nº 9.610/1998). Software copyright protection arises automatically upon creation without requiring mandatory registration (though registration at INPI is optional for evidentiary purposes) and lasts for 50 years counted from January 1st of the year following its publication or creation.
6A Brazilian fintech user exercises their statutory rights under Article 18 of the LGPD (Lei nº 13.709/2018), requesting that all their financial transaction logs and profile information be exported to a competing platform in an open format. Which specific data subject right (direito do titular) is being exercised?
A.Right to unconditional deletion of all anonymized historical statistical summaries.
B.Right to revoke past transactions executed during valid contract terms.
C.Right to data portability (portabilidade dos dados) to another service provider upon express request.
D.Right to demand permanent financial compensation for ordinary data storage.
Explanation: Article 18, Item V of the LGPD guarantees data subjects the right to data portability (portabilidade dos dados a outro fornecedor de serviço ou produto), allowing users to transfer their personal data in an interoperable, structured, and commonly used format to another service provider, subject to official regulations and commercial/industrial secret protections.
7Under Articles 13 and 15 of the Marco Civil da Internet (Lei nº 12.965/2014), what are the statutory mandatory minimum log retention periods for Internet Connection Providers (provedores de conexão) and Internet Application Providers (provedores de aplicações de internet), respectively?
A.Connection logs for 6 months; Application logs for 5 years.
B.Connection logs (registros de conexão) for 1 year; Application access logs (registros de acesso a aplicações) for 6 months.
C.Connection logs for 30 days; Application logs for 30 days.
D.Connection logs for 5 years; Application logs for 1 year.
Explanation: Under the Marco Civil da Internet: Article 13 establishes that autonomous system administrators / connection providers must retain connection logs (IP address, connection start/end timestamps, logical port) under strict confidentiality for 1 year (1 ano). Article 15 establishes that commercial internet application providers must retain application access logs (date, time, IP used to access the application) for 6 months (6 meses), accessible only via judicial court order.
8A developer exploits an authentication bypass vulnerability to access a competitor's private database server, copying confidential customer records without authorization. Under the Brazilian Penal Code (Código Penal, Art. 154-A, as introduced by Lei nº 12.737/2012 - Lei Carolina Dieckmann and updated by Lei nº 14.155/2021), this conduct constitutes the crime of:
A.Administrative non-compliance without criminal liability.
B.Copyright infringement exclusively punishable by civil damages.
C.Defamation and slander through digital communication channels.
D.Invasion of a computer device (Invasão de dispositivo informático) with breach of security mechanisms to obtain undue advantage.
Explanation: Article 154-A of the Brazilian Penal Code (introduced by Lei nº 12.737/2012 and amended by Lei nº 14.155/2021) criminalizes the invasion of an electronic device connected or not to the network, with or without breach of security mechanisms, without express or tacit authorization of the owner, to obtain, adulterate, or destroy data/information or install vulnerabilities to obtain undue advantage.
9A technology company decommissioned 500 outdated enterprise servers and data storage racks. Under the Brazilian National Solid Waste Policy (Política Nacional de Resíduos Sólidos - PNRS, Lei nº 12.305/2010) and Green IT principles, what is the mandatory structural mechanism for disposing of electrical and electronic waste (e-lixo)?
A.Reverse logistics (logística reversa), holding manufacturers, importers, distributors, and traders sharedly responsible for the collection, recycling, and environmentally sound final disposal of electronic components.
B.Incineration in municipal landfills to rapidly recover thermal energy without environmental licensing.
C.Exporting all electronic boards to developing nations without documentation to reduce domestic corporate liability.
D.Disposing of components in standard municipal domestic trash bins as non-hazardous general refuse.
Explanation: Lei nº 12.305/2010 (PNRS) mandates reverse logistics (logística reversa) as a key instrument of economic and social development characterized by a set of actions, procedures, and means to enable the collection and recovery of solid waste to the business sector for reuse or environmentally appropriate disposal. Electrical and electronic products and their components are explicitly subject to mandatory shared-lifecycle reverse logistics systems.
10An automated machine learning model deployed by a banking institution systematically assigns lower credit scores to loan applicants from specific low-income postal codes and minority demographics, despite comparable repayment histories. Under ethical computing principles and Article 20 of the LGPD, how should software engineering teams address this algorithmic discrimination?
A.Masking the algorithm's code under proprietary trade secrecy to prevent any external technical auditing or review.
B.Decreasing training dataset sizes to make the machine learning model execute faster in production.
C.Conducting fairness and bias audits, retraining models on balanced representative datasets, and enabling algorithmic explainability with the right to human review of automated decisions.
D.Replacing the automated algorithm with random lottery selection for all financial credit evaluations.
Explanation: Under Article 20 of the LGPD (Lei nº 13.709/2018), data subjects have the right to request review of decisions taken solely on the basis of automated processing of personal data that affect their interests, including credit profiling. Ethical software engineering requires rigorous fairness audits, mitigation of proxy bias in training features (e.g., postal codes acting as racial/socioeconomic proxies), and transparent explainability mechanisms.

About the ENADE Análise e Desenvolvimento de Sistemas Exam

The Exame Nacional de Desempenho dos Estudantes (ENADE) for the Curso Superior de Tecnologia em Análise e Desenvolvimento de Sistemas is a compulsory curricular component created by Federal Law nº 10.861/2004 (SINAES) and run by INEP under the Ministry of Education. Portaria MEC nº 276/2026 listed Análise e Desenvolvimento de Sistemas as one of the four cursos superiores de tecnologia assessed in the 2026 edition, alongside Gestão da Tecnologia da Informação, Gestão Ambiental, and Redes de Computadores; 2026 corresponds to Year II of the triennial cycle defined by Portaria Normativa MEC nº 840/2018, and the bacharelado and tecnólogo paper was scheduled for 29 November 2026 under Edital INEP nº 49/2026. The paper lasts 4 hours and contains 46 items: 15 Formação Geral Tecnológica multiple-choice questions defined by Portaria INEP nº 154/2026, plus 30 multiple-choice questions and 1 discursive question in the Componente Específico defined by Portaria INEP nº 169/2026. That portaria takes the Catálogo Nacional dos Cursos Superiores de Tecnologia and related professional legislation as its subsidies, and lists 20 objetos de conhecimento: algoritmos e programação; análise e arquitetura de sistemas computacionais; banco de dados; empreendedorismo; engenharia de requisitos; estruturas de dados; gerência de configuração; gerência de projetos; interação humano-computador; legislação, normas técnicas, ética e responsabilidade socioambiental; lógica matemática e teoria dos conjuntos; operações e manutenção de software; orientação a objetos; princípios de arquitetura e organização de computadores; princípios de estatística e análise de dados; princípios de redes de computadores e de sistemas distribuídos; princípios de segurança cibernética; princípios de sistemas operacionais; processo de software; and qualidade, verificação e validação de software. INEP publishes no percentage weighting per object. The exam is sat in Portuguese; INEP does not offer an English-language sitting.

Assessment

One 4-hour paper in Portuguese: Formação Geral Tecnológica (15 MCQs, common to every area in the cycle) + Componente Específico de Tecnologia em Análise e Desenvolvimento de Sistemas (30 MCQs + 1 discursive question).

Time Limit

4 hours

Passing Score

No pass mark — Conceito Enade on a 1 to 5 scale

Exam Fee

Free (gratuito) (INEP — Instituto Nacional de Estudos e Pesquisas Educacionais Anísio Teixeira)

ENADE Análise e Desenvolvimento de Sistemas Exam Content Outline

~11% of this bank

Formação Geral (Portaria INEP nº 154/2026)

The 15 official Formação Geral multiple-choice questions are common to all areas assessed in the cycle and are built on the twelve objetos de conhecimento of Portaria INEP nº 154/2026: ethics, democracy, citizenship and human rights; state, society and work; education and human and social development; climate change and socio-environmental issues; equity in ethnic-racial, generational, class, gender and sexuality relations; culture, art and communication; science, technology and innovation; globalisation and international politics; countryside, city and quality of life; territories, sociodiversity and cultural diversity; accessibility and social inclusion; and health and well-being. This bank covers one item per official object.

~13% of this bank

Legislação, normas técnicas, ética e responsabilidade socioambiental

The legal and ethical framework a software analyst must apply: LGPD legal bases, sensitive data, data subject rights, privacy by design and by default, breach notification to the ANPD, the Marco Civil da Internet, computer intrusion under Article 154-A of the Penal Code, software protection and open-source licensing, digital accessibility, and reverse logistics for electronic waste under the Política Nacional de Resíduos Sólidos.

~18% of this bank

Engenharia de requisitos e análise de sistemas computacionais

Functional and non-functional requirements, elicitation techniques, verification versus validation, requirements traceability and change control, UML use case, class, sequence, state machine, activity and deployment diagrams, BPMN 2.0 process modelling including compensation events, agile requirements with INVEST and story mapping, and architecture trade-off analysis.

~18% of this bank

Algoritmos, estruturas de dados e orientação a objetos

Asymptotic complexity, linear and tree data structures, hash tables and collision resolution, sorting and searching, graph traversal and shortest paths, dynamic programming, the four pillars of object orientation and dynamic dispatch, the SOLID principles, functional programming concepts, and managed-runtime memory behaviour.

~13% of this bank

Banco de dados e persistência

Relational integrity constraints, SQL sublanguages and relational algebra, normalisation to 2NF, 3NF and BCNF, joins and aggregation semantics, indexing and the leftmost prefix rule, ACID properties and isolation anomalies, NoSQL data models and the CAP theorem, ORM anti-patterns, query optimisation, and distributed transaction strategies.

~13% of this bank

Arquitetura de software e desenvolvimento web e mobile

MVC and layered architecture, HTTP semantics and REST maturity, cloud service models, native versus cross-platform mobile development, Gang of Four creational, structural and behavioural patterns, JWT and API security, server-side rendering trade-offs, microservices and API gateways, event-driven architecture with CQRS, hexagonal and clean architecture, and domain-driven design building blocks.

~13% of this bank

Processo de software, qualidade e operações

The test pyramid and test levels, black-box techniques such as boundary value analysis, ISO/IEC 25010 quality characteristics, cyclomatic complexity and basis path coverage, TDD and test doubles, Scrum and Kanban, CI/CD and containerisation, Kubernetes objects, OWASP web vulnerabilities, DevSecOps tooling, deployment strategies, and SRE service level indicators and error budgets.

How to Pass the ENADE Análise e Desenvolvimento de Sistemas Exam

What You Need to Know

  • Passing score: No pass mark — Conceito Enade on a 1 to 5 scale
  • Assessment: One 4-hour paper in Portuguese: Formação Geral Tecnológica (15 MCQs, common to every area in the cycle) + Componente Específico de Tecnologia em Análise e Desenvolvimento de Sistemas (30 MCQs + 1 discursive question).
  • Time limit: 4 hours
  • Exam fee: Free (gratuito)

Keys to Passing

  • Work through all 112 available questions
  • Review every answer and explanation
  • Track weak areas and revisit them
  • Use our AI tutor for tough concepts

ENADE Análise e Desenvolvimento de Sistemas Study Tips from Top Performers

1Work from the primary source: read Portaria INEP nº 169/2026 for the 20 objetos de conhecimento of the specific component and Portaria INEP nº 154/2026 for the twelve Formação Geral objects, then audit your own coverage object by object.
2Do not neglect the Formação Geral block: it is 15 of the 45 objective items and is common to every course, so transversal topics such as human rights, climate policy, accessibility, and health carry the same per-item value as any programming question.
3Read the two competências in Portaria nº 169/2026 alongside the object list. Competência I is about analysing business context and applying the software process; Competência II is about architecting and implementing software with quality and security, so scenario questions dominate over pure recall.
4Practise interpreting tables, charts, and diagrams, which is the first habilidade listed under Competência I: UML and BPMN diagrams, execution plans, and metric dashboards all appear as stimulus material.
5Prepare the discursive item separately and in Portuguese, using the past papers and answer patterns (padrões de resposta) published on the INEP portal; it is graded on subject content as well as clarity, cohesion, argumentation, and grammatical correctness.

Frequently Asked Questions

What is ENADE ADS and why is it mandatory?

ENADE is Brazil's national student performance examination, run by INEP under Federal Law nº 10.861/2004 (SINAES). It is a compulsory curricular component: an eligible concluding student of the Curso Superior de Tecnologia em Análise e Desenvolvimento de Sistemas who does not sit the exam and is not formally excused remains irregular before the SINAES, which blocks the graduation ceremony and the issue of the tecnólogo diploma.

How is the 2026 ENADE ADS paper structured?

Portaria INEP nº 154/2026 and Portaria INEP nº 169/2026 define a single 4-hour paper with 46 items: 15 Formação Geral Tecnológica multiple-choice questions common to every area in the cycle, plus 30 multiple-choice questions and 1 discursive question in the Análise e Desenvolvimento de Sistemas Componente Específico. Edital INEP nº 49/2026 scheduled the bacharelado and tecnólogo application for 29 November 2026.

What content does the specific component cover, and are there official percentage weightings?

Portaria INEP nº 169/2026 lists 20 objetos de conhecimento, from algorithms and programming, systems analysis and architecture, databases, entrepreneurship, requirements engineering, and data structures, through configuration and project management, human-computer interaction, legislation and ethics, mathematical logic, software operations and maintenance, object orientation, computer architecture principles, statistics and data analysis, networks and distributed systems principles, cybersecurity principles, operating systems principles, the software process, and software quality, verification and validation. INEP does not publish a percentage weighting for each object.

Who is eligible to sit ENADE ADS?

For cursos superiores de tecnologia, concluding students are eligible when they have completed 75% or more of the minimum curriculum workload, or are expected to complete the course within the window defined in the edital. Enrolment is performed by the institution through the Sistema Enade; from the 2026 edition, eligible entering students (ingressantes) are excused from the paper but must complete the Questionário do Estudante Ingressante to be considered regular.

How does ENADE ADS differ from the Ciência da Computação and Sistemas de Informação papers?

Each area has its own portaria and its own list of objetos de conhecimento. The ADS component (Portaria INEP nº 169/2026) takes the Catálogo Nacional dos Cursos Superiores de Tecnologia as its reference and is written around analysing business rules, applying the software process, and architecting and implementing software with quality and security. The bacharelado components for Ciência da Computação (Portaria nº 157/2026) and Sistemas de Informação (Portaria nº 168/2026) take the Diretrizes Curriculares Nacionais as their reference and carry more theoretical and organisational content respectively.

Why is this practice bank written in English when the real exam is in Portuguese?

The official ENADE is sat in Portuguese only; INEP does not offer an English-language sitting. This bank is an English-language multiple-choice study adaptation of the official objetos de conhecimento, aimed at students and educators who study software development in English, and it deliberately keeps Brazilian statutes, institutions, and technical terms in their exact Portuguese form. It is not an official translation, it does not reproduce the real paper, and it does not simulate the discursive question, which you should practise separately in Portuguese using INEP's published past papers and answer patterns.