nerdexam
(ISC)2

CSSLP · Question #206

Which of the following methods is a means of ensuring that system changes are approved before being implemented, only the proposed and approved changes are implemented, and the implementation is…

The correct answer is B. Documentation control. Documentation control ensures that all system changes are formally approved, accurately implemented as intended, and properly recorded. This process ensures transparency and accountability for all modifications.

Secure Software Deployment, Operations, Maintenance

Question

Which of the following methods is a means of ensuring that system changes are approved before being implemented, only the proposed and approved changes are implemented, and the implementation is complete and accurate?

Options

  • AConfiguration control
  • BDocumentation control
  • CConfiguration identification
  • DConfiguration auditing

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    91% (30)
  • C
    6% (2)

Why each option

Documentation control ensures that all system changes are formally approved, accurately implemented as intended, and properly recorded. This process ensures transparency and accountability for all modifications.

AConfiguration control

Configuration control is a broader process of managing changes to configuration items, but "documentation control" specifically addresses the approval, implementation, and accuracy through formalized records and procedures.

BDocumentation controlCorrect

Documentation control, in the context of change management, ensures that all proposed system changes are properly documented, reviewed, approved, and that the implementation adheres to the approved documentation. This helps verify that only authorized changes are made and correctly applied, providing a trail of accountability.

CConfiguration identification

Configuration identification involves naming and describing configuration items, which is a prerequisite for managing changes, but it doesn't ensure approval or accurate implementation.

DConfiguration auditing

Configuration auditing verifies that the system's configuration adheres to baselines and requirements after changes, but it doesn't directly ensure that changes are approved before implementation or that only approved changes are implemented.

Concept tested: Change management and configuration management principles

Source: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v3-change-management#cm-2-apply-configuration-management-processes-for-all-resources

Topics

#Change Control#Configuration Management#Documentation Control#Software Maintenance

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice