Change Management and Version Control ACCISO Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   An organization is undergoing an audit and must prove that all changes to production systems were approved and traceable. The change management system and version control system are not integrated. What is the most effective way to achieve traceability without a major system overhaul?

   • ARely on the version control system's built-in audit log as proof of approval.
   • BDisable version control for production changes to avoid the need for traceability.
   • CAsk the audit team to accept the change management system's records without linking to version control.
   • DRequire that all commit messages include the change request ID, and periodically reconcile the version control log with the change management records.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of a change impact and risk assessment?

   • ATo document the change in the configuration management database (CMDB)
   • BTo assign a unique identification number to the change request
   • CTo identify the potential effects of the change on systems, security, and business operations
   • DTo determine the cost of the change in terms of hardware and software
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A hospital's IT department has a change management policy that classifies changes as standard, normal, or emergency. A request is submitted to update the antivirus definitions on all clinical workstations. This update is routine, occurs daily, and has been pre-approved as a standard change. However, the security team has just discovered that the latest antivirus update is causing system crashes on a small number of workstations. The change manager must decide how to handle this situation. What is the most appropriate action?

   • ATreat the update as a normal change and submit it to the CAB for review before proceeding.
   • BContinue deploying the update as a standard change because it is pre-approved, and monitor for additional crashes.
   • CPause all antivirus updates indefinitely until the vendor resolves the issue.
   • DReclassify the update as an emergency change and immediately roll back the update on affected workstations.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An organization is implementing a formal change management process for the first time. The goal is to reduce the number of unplanned outages caused by unauthorized or poorly planned changes. Which element is essential for the success of this process?

   • AA tool that automatically implements changes without human review.
   • BA clear policy that defines what constitutes a change, the classification categories, and the approval workflow for each category.
   • CA policy that allows any employee to make changes as long as they document them after the fact.
   • DA requirement that all changes be approved by the CEO before implementation.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A development team is using Git for a web application. They need to develop a new feature that will take several weeks, while also fixing critical bugs in the production release. The team wants to keep the feature work isolated from the stable production code until it is complete and tested. Which branching strategy should the team adopt?

   • ACreate a dedicated feature branch from the main branch, and merge it back only after the feature is complete and tested.
   • BCreate a separate repository for the feature and merge it manually using file copies.
   • CUse a single branch and rely on code reviews to catch issues before deployment.
   • DCommit all changes directly to the main branch, but use tags to mark stable releases.
   Reveal Solution Discussion Select an answer first