Decommission Applications CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the goal of secure data destruction during decommissioning?

   • ATo delete the data using the standard delete command.
   • BTo move the data to a quarantine folder for later review.
   • CTo make the data irrecoverable, ensuring it cannot be reconstructed or accessed.
   • DTo encrypt the data and store the key in the application's directory.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What should be done with configuration files that contain sensitive information during decommissioning?

   • AEncrypt them and store them in the application's backup directory.
   • BMove them to a public folder for the decommissioning team to review.
   • CRename them and leave them on the server for reference.
   • DSecurely delete them or ensure they are overwritten to prevent recovery.
   Reveal Solution Discussion Select an answer first
4. 8application · hard

   A financial services firm is decommissioning a legacy trading application. The application used a shared service account to connect to a central database, and several other applications reference the same account for their own connections. What is the most secure approach to credential removal during this decommissioning?

   • ADisable the shared service account immediately to prevent any further use.
   • BRotate the shared service account password and update the decommissioned application's configuration to use a new dummy credential.
   • CIdentify all consumers of the shared account, provision dedicated credentials for the remaining applications, then disable the shared account.
   • DRemove the decommissioned application's configuration file that contains the shared account credentials.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Why is it important to identify dependencies of a decommissioned application?

   • ATo transfer all dependencies to the new application without review.
   • BTo ensure that other systems or data that rely on the application are not disrupted.
   • CTo speed up the decommissioning process by ignoring dependencies.
   • DTo delete all dependent systems to simplify the decommissioning.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A manufacturing company is decommissioning a quality-control application that stores inspection records. The legal department has confirmed that the retention period for these records has expired. The application's data is stored in a SQL database on a virtual machine. What is the most appropriate data disposition method?

   • AEncrypt the database and store the encryption key with the legal department.
   • BSecurely wipe the virtual machine's virtual disk and destroy any backups containing the database.
   • CArchive the database to tape and store it offsite for potential future audits.
   • DDelete the rows from the database tables and shrink the database file.
   Reveal Solution Discussion Select an answer first