CSSLP · Question #183
The Software Configuration Management (SCM) process defines the need to trace changes, and the ability to verify that the final delivered software has all of the planned enhancements that are…
The correct answer is A. Configuration status accounting B. Configuration change control C. Configuration identification D. Configuration audits. A sound Software Configuration Management (SCM) process involves identifying configurations, controlling changes, accounting for their status, and conducting audits to ensure software integrity and traceability.
Question
The Software Configuration Management (SCM) process defines the need to trace changes, and the ability to verify that the final delivered software has all of the planned enhancements that are supposed to be included in the release. What are the procedures that must be defined for each software project to ensure that a sound SCM process is implemented? Each correct answer represents a complete solution. Choose all that apply.
Options
- AConfiguration status accounting
- BConfiguration change control
- CConfiguration identification
- DConfiguration audits
- EConfiguration implementation
- FConfiguration deployment
How the community answered
(18 responses)- A89% (16)
- E6% (1)
- F6% (1)
Why each option
A sound Software Configuration Management (SCM) process involves identifying configurations, controlling changes, accounting for their status, and conducting audits to ensure software integrity and traceability.
Configuration status accounting involves recording and reporting the status of configuration items throughout the software lifecycle, detailing changes and their current states.
Configuration change control is the process of managing requests for changes to configuration items, evaluating impacts, and approving or disapproving them, ensuring controlled evolution.
Configuration identification establishes the baseline for configuration items by identifying their structure, relationships, and unique identifiers, forming the foundation of SCM.
Configuration audits verify that the configuration items meet specified requirements and that the SCM process is being followed correctly, ensuring compliance and accuracy.
Configuration implementation is a broader development phase, not a specific, core SCM procedure for defining the process itself.
Configuration deployment refers to the act of installing software, which is a step following SCM but not one of the core procedures that define the SCM process.
Concept tested: Software Configuration Management (SCM) procedures
Source: https://www.nist.gov/privacy-framework/software-configuration-management-scm
Topics
Community Discussion
No community discussion yet for this question.