Decommission Applications CSSLP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is data disposition in the context of secure decommissioning?

   • AThe process of moving data to a new application during migration.
   • BThe process of encrypting data to protect it during transmission.
   • CThe process of backing up data to ensure it can be restored.
   • DThe process of determining the final fate of data, such as archiving, deletion, or destruction, based on requirements.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of an End of Life (EOL) policy in application decommissioning?

   • ATo automatically delete all data associated with the application as soon as it is no longer used.
   • BTo extend the application's support period indefinitely until all users have migrated.
   • CTo transfer all application data to a new system without any review or approval.
   • DTo define the process and criteria for retiring an application in a controlled and secure manner.
   Reveal Solution Discussion Select an answer first
4. 18application · hard

   A bank is decommissioning a loan-origination application that stored customer financial data on a set of solid-state drives (SSDs) in a decommissioned server. The retention period for the data has expired, and the drives must be disposed of. Which method provides the STRONGEST assurance that the data is irrecoverable?

   • AOverwrite the drives with a single pass of random data.
   • BUse the drive manufacturer's secure-erase utility, then physically destroy the drives.
   • CPerform a standard format of each drive before sending them to a recycler.
   • DDegauss the drives with a strong magnetic field.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A consulting firm is decommissioning a project-management application that is licensed under a subscription with automatic renewal. The firm's finance team wants to avoid paying for another year. The subscription renews in 45 days, and the vendor requires 30 days' notice for cancellation. What should the team do to ensure the license is not renewed?

   • AWait until the subscription renews and then request a refund.
   • BProvide the 30-day cancellation notice to the vendor immediately.
   • CCancel the credit card used for the subscription to prevent the charge.
   • DStop using the application and assume the subscription will not renew.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A software company is decommissioning a customer-facing web application that is licensed under a 3-year enterprise agreement with a vendor. The agreement includes a support SLA that runs until the end of the contract term. The company wants to stop paying for the license immediately. What should the decommissioning team do FIRST?

   • ANotify the vendor that the application is being decommissioned and request immediate cancellation of the SLA.
   • BArchive the application's data before contacting the vendor about license cancellation.
   • CStop using the application and assume the license will lapse at the end of the current billing cycle.
   • DReview the contract terms for termination clauses, including any notice periods or early-termination fees.
   Reveal Solution Discussion Select an answer first