Decommission Applications CSSLP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a key step in managing dependencies during decommissioning?

   • ATransferring all dependencies to the new application without testing.
   • BDeleting all dependent systems to avoid complications.
   • CIgnoring dependencies and proceeding with decommissioning.
   • DDocumenting all systems and data that depend on the application.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A retail company is decommissioning a legacy inventory application that is supported by an external vendor under a 24/7 support SLA. The company is replacing it with a new system that will go live in 60 days. The vendor's contract requires a 90-day notice for SLA termination. What should the decommissioning team do regarding the SLA?

   • AAsk the vendor to extend the SLA for another year to avoid any risk.
   • BTerminate the SLA immediately to save costs, since the new system will be live soon.
   • CProvide the 90-day notice now, and plan for the SLA to end 30 days after the new system goes live.
   • DIgnore the SLA and rely on the new system's vendor for any support needed during the transition.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A software company is decommissioning a legacy CRM application. The company has an EOL policy that requires all decommissioning activities to be documented and approved by the security team. The CRM application has a support contract that expires in 6 months. What is the FIRST step in the decommissioning process?

   • AArchive the CRM data before any other decommissioning activity.
   • BCancel the support contract to save costs immediately.
   • CFollow the EOL policy and obtain approval from the security team before proceeding.
   • DNotify the vendor of the decommissioning and request SLA termination.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How do data retention requirements apply to decommissioned applications?

   • ARetention requirements only apply to active applications, not decommissioned ones.
   • BData that must be retained is preserved for the required period before disposition.
   • CRetention requirements are optional for decommissioned applications.
   • DAll data from decommissioned applications must be immediately destroyed.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A pharmaceutical company is decommissioning a clinical-trial data application. Regulatory requirements mandate that patient data be retained for 15 years after the trial ends. The application's database is being decommissioned, but the company plans to keep the server hardware for other purposes. What should the team do with the data?

   • ADestroy the data and rely on the regulatory body's records for any future need.
   • BEncrypt the database and leave it on the server for the retention period.
   • CArchive the database to secure storage with access controls and a documented retrieval process.
   • DDelete the database and repurpose the server immediately to save costs.
   Reveal Solution Discussion Select an answer first