A hospital is transitioning to a new electronic health record (EHR) system. The transition must comply with data retention regulations that require patient records to be kept for 10 years. The legacy system will be decommissioned after the transition. What is the most important consideration when planning the data migration?

Decommission the legacy system immediately after the new system is operational, without archiving data.

Migrate only the most recent patient records to save time and storage costs.

Migrate data in a format that is optimized for the new system, even if it loses some historical detail.

Ensure that the migrated data is complete, accurate, and accessible for the required retention period, and that the legacy system's data is securely archived or sanitized after migration.

Which of the following is a key concern during the integration of system components?

Defining the system's retirement procedures

Ensuring interfaces between components are compatible

Conducting stakeholder interviews

A software development team is implementing a new customer relationship management (CRM) system. The security requirements include encryption of sensitive data at rest and in transit, and role-based access control. During development, which practice is most important to ensure the implementation aligns with these requirements?

Rely on the security team to add encryption and access controls after development is complete.

Conduct code reviews focusing on security controls and use static analysis tools to detect vulnerabilities.

Focus on functionality first and address security requirements during the maintenance phase.

Defer security testing until after the system is fully integrated to save time.

A company has deployed a new customer-facing web application. The operations team is responsible for ongoing monitoring and maintenance. Which practice is most effective for ensuring the application continues to meet security and performance requirements?

Perform a comprehensive security review once a year.

Implement continuous monitoring of logs and metrics, with automated alerts for anomalies and a regular patch management schedule.

Freeze the system configuration to prevent changes that could introduce vulnerabilities.

Rely on user reports to identify issues and fix them as they arise.

Which activity is part of the transition and deployment phase?

Requirements elicitation from stakeholders

Data migration from the legacy system

Architectural design of the system

Certified Information Systems Security Professional

Domain 3Objective 10

3.10 - Manage the Information System Lifecycle CISSP Practice Questions (Page 1)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

9concepts

13%of the exam

Questions 1–5

1expert · hard
A hospital is transitioning to a new electronic health record (EHR) system. The transition must comply with data retention regulations that require patient records to be kept for 10 years. The legacy system will be decommissioned after the transition. What is the most important consideration when planning the data migration?
Select an answer first
2foundation · easy
Which of the following is a key concern during the integration of system components?
Select an answer first
3application · medium
A software development team is implementing a new customer relationship management (CRM) system. The security requirements include encryption of sensitive data at rest and in transit, and role-based access control. During development, which practice is most important to ensure the implementation aligns with these requirements?
Select an answer first
4application · medium
A company has deployed a new customer-facing web application. The operations team is responsible for ongoing monitoring and maintenance. Which practice is most effective for ensuring the application continues to meet security and performance requirements?
Select an answer first
5foundation · easy
Which activity is part of the transition and deployment phase?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

3.10 - Manage the Information System Lifecycle CISSP Practice Questions (Page 1)

Questions 1–5

Which of the following is a key concern during the integration of system components?

A company has deployed a new customer-facing web application. The operations team is responsible for ongoing monitoring and maintenance. Which practice is most effective for ensuring the application continues to meet security and performance requirements?

Which activity is part of the transition and deployment phase?

Keep studying — Security Architecture and Engineering