Operations and Lifecycle Management CRISC Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In Agile methodology, what is a sprint?

   • AA time-boxed iteration during which a defined set of work is completed
   • BA list of all features to be built
   • CA daily meeting to discuss progress
   • DA review of the final product
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   An organization is transitioning from a waterfall to an Agile development methodology. The risk team is concerned about the impact on change management. Which practice should the risk team recommend to maintain adequate control in the Agile environment?

   • AEliminate change management processes to allow for faster delivery.
   • BRequire formal change approval from the change advisory board (CAB) for every feature in each sprint.
   • CMove all change management responsibilities to the quality assurance (QA) team.
   • DIntegrate change management into the sprint backlog and use automated deployment pipelines with approval gates.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company's e-commerce site has experienced three separate outages in the past two months. Each outage was logged as a separate incident and resolved by restarting the web server. The root cause was never formally investigated. The risk team suspects a systemic issue. Management is reluctant to allocate resources to a full problem management investigation because the site is currently stable. Which argument BEST justifies initiating a problem management process?

   • AThe recurring incidents indicate an underlying problem that could cause a more severe or costly outage in the future.
   • BProblem management will document the workaround so future incidents can be resolved faster.
   • CThe risk team needs to assign blame for the recurring outages to prevent future occurrences.
   • DProblem management is a required step in the incident management process for all major incidents.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary goal of root cause analysis in problem management?

   • ATo assign blame to the responsible team
   • BTo identify the underlying cause of incidents to prevent recurrence
   • CTo document all incidents for audit purposes
   • DTo restore service as quickly as possible
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An organization has experienced multiple incidents over the past month where users report being unable to access the corporate web portal. Each time, the help desk resets the application pool and the service is restored. However, the issue keeps recurring. What is the MOST appropriate next step for the IT team?

   • ADocument the incidents as known errors and continue with the workaround.
   • BInitiate a problem management process to identify the root cause of the recurring incidents.
   • CEscalate each new incident to the next support tier to ensure faster resolution.
   • DUpdate the incident response plan to include the application pool reset procedure.
   Reveal Solution Discussion Select an answer first