nerdexam
(ISC)2

CSSLP · Question #167

Which of the following are the primary functions of configuration management? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. It ensures that the change is implemented in a sequential manner through formalized testing. C. It reduces the negative impact that the change might have had on the computing services and resources. D. It analyzes the effect of the change that is implemented on the system.. The primary functions of configuration management include ensuring sequential and formalized implementation of changes, reducing negative impact, and analyzing the effects of implemented changes on the system.

Secure Software Lifecycle Management

Question

Which of the following are the primary functions of configuration management? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AIt removes the risk event entirely by adding additional steps to avoid the event.
  • BIt ensures that the change is implemented in a sequential manner through formalized testing.
  • CIt reduces the negative impact that the change might have had on the computing services and resources.
  • DIt analyzes the effect of the change that is implemented on the system.

How the community answered

(60 responses)
  • A
    5% (3)
  • B
    95% (57)

Why each option

The primary functions of configuration management include ensuring sequential and formalized implementation of changes, reducing negative impact, and analyzing the effects of implemented changes on the system.

AIt removes the risk event entirely by adding additional steps to avoid the event.

Removing a risk event entirely is part of risk avoidance strategies in general risk management, not a primary function of configuration management, which focuses on controlling and tracking changes rather than eliminating all potential risks.

BIt ensures that the change is implemented in a sequential manner through formalized testing.Correct

Configuration management ensures that changes to a system or product are introduced in a controlled, sequential manner, often involving formalized testing and approval processes to maintain system integrity.

CIt reduces the negative impact that the change might have had on the computing services and resources.Correct

By managing and controlling changes effectively, configuration management helps to minimize the risks and negative impacts that unauthorized or poorly implemented changes could have on computing services and resources.

DIt analyzes the effect of the change that is implemented on the system.Correct

A key function of configuration management is to track and analyze the effects of implemented changes on the system, ensuring that desired outcomes are achieved and unintended side effects are identified and mitigated.

Concept tested: Configuration Management - Functions

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-128.pdf

Topics

#Configuration Management#Change Management#Software Development Lifecycle (SDLC)#Software Control

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice