nerdexam
(ISC)2

CSSLP · Question #68

You work as a project manager for a company. The company has started a new security software project. The software configuration management will be used throughout the lifecycle of the project. You…

The correct answer is B. Configuration control. To modify software features and logic while maintaining compatibility with the initial design, a project manager must utilize configuration control procedures.

Secure Software Lifecycle Management

Question

You work as a project manager for a company. The company has started a new security software project. The software configuration management will be used throughout the lifecycle of the project. You are tasked to modify the functional features and the basic logic of the software and then make them compatible to the initial design of the project. Which of the following procedures of the configuration management will you follow to accomplish the task?

Options

  • AConfiguration status accounting
  • BConfiguration control
  • CConfiguration audits
  • DConfiguration identification

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    83% (19)
  • C
    9% (2)
  • D
    4% (1)

Why each option

To modify software features and logic while maintaining compatibility with the initial design, a project manager must utilize configuration control procedures.

AConfiguration status accounting

Configuration status accounting involves recording and reporting the current status of configuration items, including proposed changes and their implementation status, but it is not the process of making the changes themselves.

BConfiguration controlCorrect

Configuration control is the process of managing changes to configuration items throughout the system lifecycle. This procedure involves evaluating change requests, approving or disapproving them, and implementing approved changes, ensuring that modifications to functional features and basic logic are managed and remain compatible with the project's baseline design.

CConfiguration audits

Configuration audits are independent reviews to assess the compliance of configuration items with baseline requirements and project documentation, rather than the process of implementing modifications.

DConfiguration identification

Configuration identification involves selecting and documenting the functional and physical characteristics of configuration items, which is an initial step in configuration management, not the process of modifying existing features.

Concept tested: Software Configuration Management (SCM) - control

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-128.pdf

Topics

#Configuration Management#Software Configuration Management (SCM)#Configuration Control#Change Management

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice