PracticeVideosBlogFlashcardsEspañol
All Practice Exams

112+ Free ENADE Sistemas de Informação Practice Questions

Prepare for the ENADE Sistemas de Informação — Exame Nacional de Desempenho dos Estudantes exam with instant access — no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
112+ Questions
100% Free

Loading practice questions...

Same family resources

Explore More ENADE National Student Performance Examination (Brazil)

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

ENADE Análise e Desenvolvimento de Sistemas (Tecnólogo) (Brazil)

Practice Questions

ENADE Ciência da Computação (Brazil)

Practice Questions

ENADE Design Gráfico (Tecnólogo) (Brazil)

Practice Questions

ENADE Gestão Pública (Tecnólogo) (Brazil)

Practice Questions

ENADE Marketing (Tecnólogo) (Brazil)

Practice Questions

ENADE Pedagogia (Brazil)

Practice Questions
2026 Statistics

Key Facts: ENADE Sistemas de Informação Exam

Lei 10.861/2004

Legal basis (SINAES)

MEC

Portaria 168/2026

Specific component guidelines

INEP

Portaria 154/2026

Formação Geral guidelines

INEP

46 items

15 FG MCQ + 30 CE MCQ + 1 discursive

INEP

4 hours

Official duration

INEP

1 to 5

Conceito Enade scale, no pass mark

80%

Workload threshold for concluinte eligibility

INEP

Portuguese

Official assessment language

ENADE Sistemas de Informação is Brazil's compulsory national capstone assessment for graduating Information Systems students, run by INEP/MEC: one 4-hour paper in Portuguese with 15 Formação Geral MCQs, 30 specific MCQs, and 1 discursive question, free of charge, with no individual pass mark. This free practice bank is an English-language multiple-choice study adaptation mapped to the objetos de conhecimento of Portaria INEP nº 154/2026 and nº 168/2026 — it is not an official translation or a simulation of the real paper.

Sample ENADE Sistemas de Informação Practice Questions

Try these sample questions to test your ENADE Sistemas de Informação exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 112+ question experience with AI tutoring.

1A Brazilian e-commerce enterprise collects personal data (name, CPF, delivery address, and credit card details) from consumers to process online purchases and issue tax invoices (Nota Fiscal Eletrônica). Under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais - LGPD, Lei nº 13.709/2018, Art. 7º), which legal bases directly authorize this data processing without requiring explicit user consent?
A.Execution of a contract to which the data subject is a party and compliance with a legal or regulatory obligation by the controller.
B.Protection of the controller's economic credit score and general market research interest.
C.Regular exercise of rights in administrative proceedings and exclusive defense of corporate public relations.
D.Public security protection and international commercial reciprocity agreements.
Explanation: Under Article 7 of the LGPD (Lei nº 13.709/2018), personal data processing can occur without consent when necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party (Item V), and for compliance with a legal or regulatory obligation by the controller (Item II), such as mandatory tax recording and invoicing under Brazilian fiscal legislation.
2The Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet, Lei nº 12.965/2014, Art. 9º) establishes the principle of Net Neutrality (Neutralidade de Rede). According to this legal provision and its regulative Decree (Decreto nº 8.771/2016), under what exceptional conditions may an Internet service provider discriminate or degrade data traffic?
A.Only due to technical requirements indispensable to the adequate provision of services and applications, or for prioritizing emergency services.
B.Whenever commercial agreements allow zero-rating packages that prioritize selected streaming media partners.
C.During peak network utilization hours to restrict peer-to-peer file sharing and optimize commercial bandwidth profits.
D.Upon unilateral decision of the telecom operator to block encrypted messaging applications that compete with SMS.
Explanation: Article 9 of Lei nº 12.965/2014 and Decree nº 8.771/2016 mandate that traffic discrimination or degradation is strictly prohibited except under two exceptional circumstances: indispensable technical requirements for network stability/security (e.g., mitigating DDoS attacks, handling spam) and prioritization of emergency services (such as 190, 192, 193). Commercial discrimination is illegal.
3A enterprise data center consumes a total facility power of 2,400 kW, of which 1,600 kW is consumed directly by IT equipment (servers, storage, and networking devices), while the remaining 800 kW powers cooling systems, UPS losses, and lighting. What is the Power Usage Effectiveness (PUE) of this facility, and what is its ideal theoretical minimum?
A.PUE = 1.50; ideal theoretical minimum is 1.0.
B.PUE = 0.67; ideal theoretical minimum is 0.0.
C.PUE = 2.00; ideal theoretical minimum is 1.0.
D.PUE = 1.25; ideal theoretical minimum is 0.5.
Explanation: PUE (Power Usage Effectiveness) is defined by The Green Grid as: PUE = Total Facility Power / IT Equipment Power. In this scenario, PUE = 2,400 kW / 1,600 kW = 1.50. A PUE of 1.0 represents the theoretical ideal, where 100% of facility electrical energy is used directly by computing equipment with zero overhead for cooling, lighting, or power conversion losses.
4In Brazil, public digital services must comply with the e-MAG (Modelo de Acessibilidade em Governo Eletrônico) framework and the international Web Content Accessibility Guidelines (WCAG 2.1). What are the four core accessibility principles that form the foundation of these standards?
A.Perceivable, Operable, Understandable, and Robust (POUR).
B.Responsive, Scalable, Maintainable, and Secure (RSMS).
C.Portable, Intuitive, Fault-Tolerant, and Distributed (PIFD).
D.Accessible, Compliant, Efficient, and Deterministic (ACED).
Explanation: Both WCAG 2.1 and the Brazilian e-MAG model are structured around four fundamental principles: 1) Perceivable (information and UI components must be presentable to users in ways they can perceive); 2) Operable (UI components and navigation must be operable); 3) Understandable (information and UI operation must be understandable); and 4) Robust (content must be robust enough to be interpreted reliably by a wide variety of user agents, including assistive technologies).
5According to the Code of Ethics of the Brazilian Computer Society (Código de Ética da Sociedade Brasileira de Computação - SBC) and the ACM/IEEE-CS Software Engineering Code of Ethics, what is the primary overarching duty of an information systems professional when encountering software flaws that could threaten public safety, human rights, or environmental well-being?
A.Prioritize the public health, safety, and welfare above employer or client private interests, disclosing the danger to appropriate authorities if internal escalation fails.
B.Maintain strict corporate confidentiality at all costs to prevent market devaluation and legal liability for the employer.
C.Quietly remove their personal name and git commit metadata from the codebase while allowing the deployment to proceed.
D.Execute automated stress tests only after system deployment to avoid incurring project schedule delays.
Explanation: The SBC Code of Ethics and the ACM/IEEE-CS Joint Code explicitly state that computing professionals must hold paramount the safety, health, and welfare of the public. If an employer or client refuses to rectify a software defect or architectural flaw that endangers human lives, civil liberties, or the environment, the professional is ethically bound to escalate the issue and, if necessary, alert regulatory or public authorities.
6A private hospital develops an AI diagnostic system that analyzes biometric facial scans, genetic markers, and electronic health records. Under the LGPD (Lei nº 13.709/2018, Art. 11), these data are classified as Sensitive Personal Data (Dados Pessoais Sensíveis). In the absence of specific consent, under which condition is processing these sensitive health data legally permissible?
A.Protection of life or physical safety of the data subject or a third party, and health protection in procedures performed by health professionals or health entities.
B.Legitimate interest of the hospital's marketing and research partners for predictive pharmaceutical advertising.
C.Standard execution of a commercial service contract with third-party advertising brokers.
D.General business development without explicit security controls.
Explanation: Under Article 11, II of the LGPD, sensitive personal data (such as health, biometric, and genetic data) can be processed without consent only under strict statutory hypotheses, notably: protection of life or physical safety of the data subject or third parties (item 'e'), and health protection in procedures conducted by health professionals, health services, or health authorities (item 'f'). Crucially, 'legitimate interest' (Art. 7, IX) does NOT apply to sensitive personal data under Art. 11.
7Under the Marco Civil da Internet (Lei nº 12.965/2014, Arts. 13 and 15), what are the statutory mandatory minimum retention periods for Connection Logs (Registros de Conexão) by Autonomous System Providers (ISPs) and for Application Access Logs (Registros de Acesso a Aplicações) by Internet application providers, respectively?
A.1 year for connection logs; 6 months for application access logs.
B.6 months for connection logs; 1 year for application access logs.
C.5 years for connection logs; 2 years for application access logs.
D.Indefinite retention for connection logs; 3 months for application access logs.
Explanation: According to Article 13 of Lei nº 12.965/2014, Internet connection providers (Autonomous Systems) must keep connection logs under confidentiality and in a controlled environment for a minimum period of 1 year. Under Article 15, providers of Internet applications (operating commercially) must keep application access logs for a minimum period of 6 months. Both periods may be extended upon judicial request.
8A Brazilian fintech utilizes automated machine learning models to approve or deny personal credit requests. A rejected applicant requests clarification and review. Under Article 20 of the LGPD (Lei nº 13.709/2018), what right does the data subject hold regarding automated decision-making?
A.The right to request a review of decisions made solely on the basis of automated processing that affect their interests, including the criteria and procedures used.
B.The right to immediately receive the complete proprietary source code and intellectual property of the machine learning model.
C.The absolute right to receive the requested credit limit regardless of risk scoring algorithms.
D.The right to demand financial compensation from the financial institution solely due to automated refusal.
Explanation: Article 20 of the LGPD guarantees that the data subject has the right to request a review of decisions made solely on the basis of automated processing of personal data that affect their interests, including decisions intended to define their personal, professional, consumer, or credit profile. The controller must provide clear and adequate information regarding the criteria and procedures used, respecting commercial and industrial secrecy.
9A municipal IT department in Brazil initiates a Sustainable Public Procurement program (Contratações Públicas Sustentáveis) for computer workstations. In accordance with the Brazilian National Solid Waste Policy (Política Nacional de Resíduos Sólidos - Lei nº 12.305/2010) and Green IT principles, which requirement must be incorporated into the technical bidding specifications?
A.Reverse Logistics (Logística Reversa) commitment by suppliers for end-of-life disposal, energy efficiency certification (e.g., Energy Star / Procel), and compliance with hazardous substance restrictions (RoHS).
B.Requirement that all electronic equipment be discarded into municipal sanitary landfills within 24 months of purchase.
C.Mandatory continuous 24/7 overclocking of all CPU cores to ensure maximum throughput regardless of thermal dissipation.
D.Prohibition of refurbished or modular hardware components during maintenance cycles.
Explanation: Under Lei nº 12.305/2010 and Green IT procurement standards, electronic equipment tenders must enforce Reverse Logistics (Logística Reversa) systems where manufacturers and distributors take back obsolete e-waste (REEE). Additionally, energy efficiency standards (Energy Star/Procel Seal) and hazardous material restrictions (RoHS Directive - restricting lead, mercury, cadmium) are essential criteria to minimize environmental impact and toxic contamination.
10A human resources analytics startup in São Paulo trains a neural network on 10 years of historical corporate hiring data to pre-screen software engineering applicants. During auditing, the model systematically assigns lower ranking scores to qualified female and minority candidates. Which sociotechnical factor is the primary cause of this algorithmic bias?
A.Historical representation bias and label bias embedded in the training dataset reflecting past discriminatory hiring patterns.
B.Hardware limitations in GPU tensor cores causing mathematical floating-point rounding errors in backpropagation.
C.Failure to enforce strict network-level firewalls during dataset transmission.
D.Excessive use of non-relational database indexes during feature storage.
Explanation: Algorithmic bias in machine learning models primarily arises from historical bias present in the training data. If past hiring practices were disproportionately male-dominated or discriminatory, the supervised learning model will learn and amplify those historical correlations as predictive signals of 'success', perpetuating unfair discrimination unless fairness constraints, debiasing, and algorithmic audits are applied.

About the ENADE Sistemas de Informação Exam

The Exame Nacional de Desempenho dos Estudantes (ENADE) for Sistemas de Informação is a compulsory curricular component created by Federal Law nº 10.861/2004 (SINAES) and run by INEP under the Ministry of Education. Portaria MEC nº 276/2026 placed Bacharelado em Sistemas de Informação among the 40 areas assessed in the 2026 edition, which corresponds to Year II of the triennial cycle defined by Portaria Normativa MEC nº 840/2018; the bacharelado and tecnólogo paper was scheduled for 29 November 2026 under Edital INEP nº 49/2026. The paper lasts 4 hours and contains 46 items: 15 Formação Geral multiple-choice questions defined by Portaria INEP nº 154/2026, plus 30 multiple-choice questions and 1 discursive question in the Componente Específico defined by Portaria INEP nº 168/2026. That portaria draws on the Diretrizes Curriculares Nacionais for the course and lists 20 objetos de conhecimento: lógica matemática e matemática discreta; probabilidade e estatística; algoritmos e estruturas de dados; fundamentos e paradigmas de linguagens de programação; pesquisa operacional; fundamentos de sistemas de informação e teoria geral de sistemas; arquitetura corporativa e da informação; governança de tecnologia da informação; arquitetura e organização de computadores; sistemas operacionais; redes de computadores e sistemas distribuídos; engenharia de software; concepção e modelagem de sistemas de informação; gerenciamento de projetos; modelagem e gestão de processos de negócio e da informação; interação humano-computador; segurança da informação e de sistemas de informação; banco de dados; visualização e ciência de dados; and informática e sociedade. INEP publishes no percentage weighting per object. The exam is sat in Portuguese; INEP does not offer an English-language sitting.

Assessment

One 4-hour paper in Portuguese: Formação Geral (15 MCQs, common to every area in the cycle) + Componente Específico de Sistemas de Informação (30 MCQs + 1 discursive question).

Time Limit

4 hours

Passing Score

No pass mark — Conceito Enade on a 1 to 5 scale

Exam Fee

Free (gratuito) (INEP — Instituto Nacional de Estudos e Pesquisas Educacionais Anísio Teixeira)

ENADE Sistemas de Informação Exam Content Outline

~11% of this bank

Formação Geral (Portaria INEP nº 154/2026)

The 15 official Formação Geral multiple-choice questions are common to all areas assessed in the cycle and are built on the twelve objetos de conhecimento of Portaria INEP nº 154/2026: ethics, democracy, citizenship and human rights; state, society and work; education and human and social development; climate change and socio-environmental issues; equity in ethnic-racial, generational, class, gender and sexuality relations; culture, art and communication; science, technology and innovation; globalisation and international politics; countryside, city and quality of life; territories, sociodiversity and cultural diversity; accessibility and social inclusion; and health and well-being. This bank covers one item per official object.

~13% of this bank

Informática e sociedade

The legal, ethical, and social framework an information systems graduate must reason about: LGPD legal bases, sensitive data and international transfers, the role of the encarregado (DPO) and incident notification to the ANPD, the Marco Civil da Internet, digital government and the digital divide under Lei nº 14.129/2021, accessibility under e-MAG and WCAG, Green IT metrics, and the governance of algorithmic decision-making.

~18% of this bank

Governança de TI e arquitetura corporativa

Governance versus management in COBIT 2019, its five domains and design factors, ITIL 4 guiding principles, four dimensions, service value chain and practices, TOGAF ADM phases and the Enterprise Continuum, strategic alignment models, IT balanced scorecard, public sector IT planning (PDTI), and IT financial analysis including TCO, ROI, and payback.

~13% of this bank

Engenharia de requisitos e modelagem de processos

Functional and non-functional requirements and their classification under FURPS+ and ISO/IEC/IEEE 29148, elicitation techniques, requirements traceability, UML structural and behavioural modelling, and BPMN 2.0 process modelling including gateways, boundary events, pools, lanes, and message flows.

~18% of this bank

Banco de dados, visualização e ciência de dados

Relational normalisation from 1NF to BCNF, relational algebra, SQL semantics including joins, aggregation, window functions and CTEs, transaction isolation and concurrency anomalies, OLTP versus OLAP, dimensional modelling and slowly changing dimensions, ETL versus ELT, lakehouse medallion architecture, NoSQL data models, the CAP theorem and BASE, and distributed processing with Apache Spark.

~13% of this bank

Gerenciamento de projetos e métricas de software

Scrum accountabilities and events, Kanban WIP limits and Little's Law, the triple constraint, earned value management including variances, performance indices, forecasting and TCPI, critical path analysis and float, PERT three-point estimation, IFPUG function point analysis, COCOMO effort estimation, and enterprise agile scaling frameworks.

~13% of this bank

Sistemas empresariais, integração e segurança da informação

ERP, CRM, and SCM architecture and the bullwhip effect, SOA versus microservices, SOAP versus REST, event-driven architecture with CQRS and event sourcing, the CIA triad, ISO/IEC 27001 information security management, disaster recovery objectives, access control models, digital signatures and ICP-Brasil, OWASP web vulnerabilities, Zero Trust, OAuth 2.0 with PKCE, and STRIDE threat modelling.

How to Pass the ENADE Sistemas de Informação Exam

What You Need to Know

  • Passing score: No pass mark — Conceito Enade on a 1 to 5 scale
  • Assessment: One 4-hour paper in Portuguese: Formação Geral (15 MCQs, common to every area in the cycle) + Componente Específico de Sistemas de Informação (30 MCQs + 1 discursive question).
  • Time limit: 4 hours
  • Exam fee: Free (gratuito)

Keys to Passing

  • Work through all 112 available questions
  • Review every answer and explanation
  • Track weak areas and revisit them
  • Use our AI tutor for tough concepts

ENADE Sistemas de Informação Study Tips from Top Performers

1Work from the primary source: read Portaria INEP nº 168/2026 for the 20 objetos de conhecimento of the specific component and Portaria INEP nº 154/2026 for the twelve Formação Geral objects, then audit your own coverage object by object.
2Do not neglect the Formação Geral block: it is 15 of the 45 objective items and is common to every course, so transversal topics such as human rights, climate policy, accessibility, and health carry the same per-item value as any governance question.
3Rehearse the quantitative items by hand: earned value variances and indices, TCPI, payback period, flow efficiency, Little's Law, PERT expected duration and standard deviation, and unadjusted function point counts all appear as calculation questions.
4Read the two competências in Portaria INEP nº 168/2026 as well as the object list. The exam is written around understanding, analysing, and evaluating IT solutions in organisational context, so pure definition recall is rarely enough.
5Prepare the discursive item separately and in Portuguese, using the past papers and answer patterns (padrões de resposta) published on the INEP portal; it is graded on subject content as well as clarity, cohesion, argumentation, and grammatical correctness.

Frequently Asked Questions

What is ENADE Sistemas de Informação and why is it mandatory?

ENADE is Brazil's national student performance examination, run by INEP under Federal Law nº 10.861/2004 (SINAES). It is a compulsory curricular component: an eligible concluding student of a Bacharelado em Sistemas de Informação who does not sit the exam and is not formally excused remains irregular before the SINAES, which blocks the graduation ceremony and the issue of the diploma.

How is the 2026 ENADE Sistemas de Informação paper structured?

Portaria INEP nº 154/2026 and Portaria INEP nº 168/2026 define a single 4-hour paper with 46 items: 15 Formação Geral multiple-choice questions common to every area in the cycle, plus 30 multiple-choice questions and 1 discursive question in the Sistemas de Informação Componente Específico. Edital INEP nº 49/2026 scheduled the bacharelado and tecnólogo application for 29 November 2026.

What content does the specific component cover, and are there official percentage weightings?

Portaria INEP nº 168/2026 lists 20 objetos de conhecimento, spanning discrete mathematics and statistics, algorithms and programming paradigms, operations research, systems theory, enterprise and information architecture, IT governance, computer architecture and operating systems, networks and distributed systems, software engineering, systems modelling, project management, business process management, human-computer interaction, information security, databases, data visualisation and data science, and computing and society. INEP does not publish a percentage weighting for each object, so any percentage split you see elsewhere is an estimate rather than an official blueprint.

Is there a pass mark, and how does the result affect the course?

There is no individual pass mark. Results are aggregated into the course-level Conceito Enade on a 1 to 5 scale, which is a core input to the Conceito Preliminar de Curso (CPC) and the Índice Geral de Cursos (IGC) used by MEC in regulating higher education. Portaria INEP nº 359/2025, Art. 181 states that the calculation rules are set in per-edition technical notes.

Who is eligible, and what happens to a student who does not attend?

Concluding bacharelado students are eligible when they have completed 80% or more of the minimum curriculum workload, or are expected to complete the course within the window defined in the edital. Enrolment is performed by the institution through the Sistema Enade. A student who is enrolled and does not attend, and does not obtain a formal dispensa from INEP, remains irregular and cannot graduate until the situation is regularised.

Why is this practice bank written in English when the real exam is in Portuguese?

The official ENADE is sat in Portuguese only; INEP does not offer an English-language sitting. This bank is an English-language multiple-choice study adaptation of the official objetos de conhecimento, aimed at students and educators who study information systems in English, and it deliberately keeps Brazilian statutes, institutions, and technical terms in their exact Portuguese form. It is not an official translation, it does not reproduce the real paper, and it does not simulate the discursive question, which you should practise separately in Portuguese using INEP's published past papers and answer patterns.