nerdexam
Isaca

CISA · Question #329

From a risk management perspective, which of the following is the BEST approach when implementing a large and complex data center IT infrastructure?

The correct answer is C. A deployment plan based on sequenced phases. Phased deployment (C) is the best risk management approach because it breaks a complex rollout into controlled stages, allowing teams to identify and resolve issues incrementally before they cascade across the entire infrastructure - minimizing blast radius at each step. Why…

Submitted by amina.ke· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

From a risk management perspective, which of the following is the BEST approach when implementing a large and complex data center IT infrastructure?

Options

  • AA big bang deployment with a successful proof of concept
  • BPrototyping and a one-phase deployment
  • CA deployment plan based on sequenced phases
  • DSimulating the new infrastructure before deployment

How the community answered

(40 responses)
  • A
    5% (2)
  • B
    15% (6)
  • C
    75% (30)
  • D
    5% (2)

Explanation

Phased deployment (C) is the best risk management approach because it breaks a complex rollout into controlled stages, allowing teams to identify and resolve issues incrementally before they cascade across the entire infrastructure - minimizing blast radius at each step.

Why the distractors fall short:

  • A (Big bang): Even with a successful proof of concept, deploying everything at once maximizes risk exposure; a single failure can bring down the entire system with no fallback.
  • B (Prototyping + one-phase): Prototyping validates concepts but a single deployment phase still carries the same all-or-nothing risk as a big bang approach.
  • D (Simulation): Simulating the environment is a valuable preparatory step, but it doesn't replace an actual phased rollout - simulations can't anticipate every real-world variable.

Memory tip: Think of it like building a skyscraper - you don't pour all the concrete at once. You sequence the phases (foundation → frame → floors) so each stage can be inspected before the next begins. In risk management, sequenced = safe.

Topics

#Risk Management#Deployment Strategies#IT Project Implementation#Phased Approach

Community Discussion

No community discussion yet for this question.

Full CISA Practice