Configuration Management CAS-005 Practice Questions (Page 7)

Questions 31–34

1. 31expert · hard

   A defense contractor is decommissioning a facility and must dispose of assets that include both classified storage media and non-classified office equipment. The disposal policy requires that classified media be destroyed in a way that is verifiable and that non-classified equipment be recycled. The contractor has a limited budget for disposal. Which approach BEST balances security and cost?

   • AUse a certified disposal vendor for classified media, and recycle non-classified equipment through a standard e-waste program.
   • BRecycle all assets through a standard e-waste program, including classified media.
   • CDestroy all assets in-house using a shredder, regardless of classification.
   • DUse the same certified disposal vendor for both classified and non-classified assets to ensure consistent handling.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A large enterprise is implementing a new CMDB. The change management team wants to ensure that all changes to configuration items are tracked and that the CMDB remains accurate. They are considering whether to require that all changes be approved by the CAB, even minor ones. What is the MOST significant drawback of requiring CAB approval for all changes?

   • AIt will reduce the need for automated discovery tools, as all changes are manually approved.
   • BIt will increase the workload on the CAB, but this is acceptable if it ensures accuracy.
   • CIt will slow down the change process, potentially delaying critical updates and reducing agility.
   • DIt will make the CMDB more accurate, but it will also increase the risk of unauthorized changes.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A telecommunications company is upgrading its network infrastructure. The old routers and switches are being replaced with newer models. The company wants to ensure that the old equipment is disposed of in an environmentally responsible manner and that any data stored on them is securely erased. Which step should be included in the disposal procedure?

   • AThrow the devices in the regular trash, as they are no longer needed.
   • BWipe the configuration and data from the devices, then send them to a certified e-waste recycler.
   • CSell the devices to a third-party reseller without wiping them, as they are being replaced.
   • DStore the devices in a warehouse for potential future use.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A university's IT department is conducting an annual asset inventory. They have discovered that several network switches are not recorded in the asset management system, and some recorded switches are no longer in use. The department wants to improve the accuracy of the inventory. Which practice would be MOST effective?

   • ARequire all departments to submit a list of their IT equipment every month.
   • BConduct a manual inventory check at the end of each fiscal year.
   • CUse a spreadsheet to track all assets and update it whenever a change is made.
   • DImplement automated network discovery tools to continuously scan and update the asset inventory.
   Reveal Solution Discussion Select an answer first