3.10 - Manage the Information System Lifecycle CISSP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A government agency has developed a new case management system. Before deployment, the agency must ensure the system meets all functional requirements and that it actually supports the way caseworkers perform their daily tasks. Which combination of activities best achieves this?

   • AConduct system testing against the requirements specification and user acceptance testing with a pilot group of caseworkers.
   • BPerform only unit testing to ensure each module works correctly.
   • CConduct a security assessment only, since security is the most important requirement.
   • DDeploy the system immediately and rely on user feedback to fix issues.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is operating a legacy system that is critical to business operations but is approaching end-of-life. The system has no vendor support, and the hardware is failing. The company has a limited budget and must maintain operations while planning for replacement. Which approach best balances operational continuity and risk?

   • AImmediately decommission the system and switch to a manual process until the replacement is ready.
   • BContinue operating the system without changes to save budget for the replacement.
   • CPurchase extended support from the vendor, even though the system is end-of-life.
   • DImplement a risk mitigation plan that includes hardware redundancy, enhanced monitoring, and a detailed replacement roadmap with a timeline.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of data sanitization during system retirement?

   • ATo comply with software licensing agreements
   • BTo prevent unauthorized access to residual data
   • CTo improve system performance
   • DTo reduce storage costs
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A defense contractor is developing a new secure communication system. The system must meet strict performance requirements (low latency) and security requirements (end-to-end encryption). During verification, the system meets all functional requirements but fails to meet the latency requirement under peak load. The project manager must decide whether to proceed to deployment. What is the most appropriate action?

   • ADeploy the system but document the latency issue as a known limitation.
   • BDo not deploy; work with stakeholders to analyze the latency issue and determine if the requirement can be relaxed or if the architecture needs optimization.
   • CDeploy the system and monitor latency in production, hoping it improves with real-world usage.
   • DReduce the security encryption strength to improve latency and meet the performance requirement.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary goal of the integration phase in the information system lifecycle?

   • ATo define the initial stakeholder requirements
   • BTo write the system's user manuals
   • CTo decommission outdated hardware
   • DTo combine components into a complete system that works together
   Reveal Solution Discussion Select an answer first