3.10 - Manage the Information System Lifecycle CISSP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A hospital is transitioning from a legacy electronic health record (EHR) system to a new cloud-based EHR. The transition must minimize downtime and ensure that patient data is accurately migrated. Which approach best meets these requirements?

   • APerform a big-bang cutover over a weekend to minimize disruption.
   • BMigrate data in a single batch without validation to save time.
   • CRun both systems in parallel for a period, then cut over after validating data integrity and user readiness.
   • DDecommission the legacy system immediately after the new system is deployed.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which practice is a key part of secure development and implementation?

   • AUsing shared credentials for all developers
   • BDisabling logging to reduce system overhead
   • CConducting code reviews to identify vulnerabilities
   • DDeferring all security testing until after deployment
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A logistics company is integrating a new GPS tracking system with its existing dispatch and billing systems. The GPS system sends location data to the dispatch system, and the billing system uses the same data to calculate delivery charges. During integration testing, the billing system receives data in a different format than expected. What is the most appropriate action?

   • AStop the integration and require the GPS vendor to change the data format to match the billing system.
   • BHave the dispatch system convert the data format before sending it to the billing system.
   • CIgnore the format mismatch and manually correct billing data each day.
   • DUpdate the billing system's interface to accept the GPS data format, and add validation to ensure data integrity.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A development team is building a new mobile banking app. The security requirements mandate multi-factor authentication (MFA) and encryption of all sensitive data. During implementation, the team discovers that using a third-party authentication library would speed up development but may not fully comply with the MFA requirement. What is the best course of action?

   • AEvaluate the library against the security requirements and, if it falls short, develop a custom authentication module that meets the MFA requirement.
   • BSkip MFA for now and add it in a future release to meet the deadline.
   • CUse the third-party library and add a note in the documentation that MFA is partially implemented.
   • DAsk the security team to relax the MFA requirement to fit the library.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A global bank is designing a new payment processing system. The system must meet regulatory requirements for data residency in each country it operates, handle peak transaction loads during holidays, and integrate with multiple legacy banking systems. The architecture team is considering a microservices approach deployed across multiple cloud regions. Which additional architectural consideration is most critical to address the data residency requirement?

   • AUsing a single global database to simplify data management and ensure consistency.
   • BDesigning the microservices so that data processing and storage occur within the region where the data originates, using regional deployment and data partitioning.
   • CImplementing a robust API gateway to handle integration with legacy systems.
   • DChoosing a cloud provider that offers the lowest cost per transaction.
   Reveal Solution Discussion Select an answer first