Implementation Configuration and Release Management CISA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of integrating change management with configuration management?

   • ATo eliminate the need for version control
   • BTo allow unauthorized changes to be made quickly
   • CTo ensure that configuration items are updated and tracked after approved changes
   • DTo speed up the deployment process by skipping testing
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does change management integrate with configuration and release management to ensure changes are authorized?

   • ABy requiring that all changes be approved through a formal change advisory board before implementation
   • BBy automatically deploying all changes without review
   • CBy documenting changes only after they are implemented
   • DBy allowing developers to make changes directly to production
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A software company is preparing to release a major update to its flagship product. The release manager has scheduled the release for a Friday evening, but the change advisory board (CAB) has not yet approved the change. The release includes critical security fixes that are needed to address a vulnerability. What should the release manager do?

   • ADelay the release until the CAB approves the change, even if it means the vulnerability remains unpatched for a few more days.
   • BRelease the update but only to a small group of users as a pilot to reduce risk.
   • CAsk the CAB to approve the change retroactively after the release to avoid delaying the security fix.
   • DProceed with the release because the security fixes are urgent and cannot wait.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization is implementing a new enterprise resource planning (ERP) system. The configuration management team has established a baseline for the system configuration. However, during the implementation, a developer makes a change to a configuration file without updating the baseline. The change is discovered during a routine audit. What is the MOST appropriate action?

   • AConduct a post-implementation review to decide whether the change should be kept.
   • BUpdate the baseline to reflect the change and document it as an authorized change.
   • CRoll back the change to the baseline and initiate a formal change request for the desired modification.
   • DLeave the change in place but note it in the audit report as a minor deviation.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is planning to release a new version of its mobile app. The release includes a new feature that requires a server-side update. The release manager is concerned about the impact on existing users. What is the MOST appropriate release strategy to minimize risk?

   • APhased release, rolling out to a small percentage of users first.
   • BPilot release to internal users only, then a big bang to all users.
   • CParallel release, running old and new versions simultaneously.
   • DBig bang release to all users at the same time.
   Reveal Solution Discussion Select an answer first