CSA CCSK Exam - Topic 7 Question 75 Discussion

Actual exam question for CSA's CCSK exam

Question #: 75
Topic #: 7

CCM: A hypothetical start-up company called "ABC" provides a cloud based IT management solution. They are growing rapidly and therefore need to put controls in place in order to manage any changes in

their production environment. Which of the following Change Control & Configuration Management production environment specific control should they implement in this scenario?

APolicies and procedures shall be established for managing the risks associated with applying changes to business-critical or customer (tenant)-impacting (physical and virtual) applications and system-
system interface (API) designs and configurations, infrastructure network and systems components.

BPolicies and procedures shall be established, and supporting business processes and technical measures implemented, to restrict the installation of unauthorized software on organizationally-owned or
managed user end-point devices (e.g. issued workstations, laptops, and mobile devices) and IT infrastructure network and systems components.

CAll cloud-based services used by the company's mobile devices or BYOD shall be pre-approved for usage and the storage of company business data.

DNone of the above

Show Suggested Answer

Suggested Answer: A

by Whitney at Sep 18, 2024, 08:57 PM

Limited Time Offer

25%

Off

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

India

6 months ago

Wait, are they really not doing this already?

upvoted 0 times

...

Lenna

6 months ago

B seems more relevant for endpoint security.

upvoted 0 times

...

Pearly

6 months ago

Not sure if A is enough, what about user training?

upvoted 0 times

...

Yvette

7 months ago

Totally agree, A covers all the bases!

upvoted 0 times

...

Silvana

7 months ago

I think option A is crucial for managing risks.

upvoted 0 times

...

Mona

7 months ago

I’m leaning towards option A too, but I wonder if there’s a chance they could need elements from option B as well. It's tough to say definitively!

upvoted 0 times

...

Arlene

7 months ago

I think we had a practice question about cloud services and BYOD policies. Option C sounds familiar, but I'm not convinced it's the best fit here.

upvoted 0 times

...

Louvenia

7 months ago

I'm not entirely sure, but I feel like option B could also be relevant since unauthorized software can really impact system stability.

upvoted 0 times

...

Karrie

8 months ago

I remember we discussed the importance of managing risks with changes in production environments. I think option A might be the right choice since it focuses on business-critical applications.

upvoted 0 times

...

Eloisa

8 months ago

Okay, I've got this. Based on the details provided, option A looks like the best choice. It specifically mentions managing risks associated with changes to business-critical applications and infrastructure, which is exactly what the company needs as they scale up their cloud operations.

upvoted 0 times

...

Cassie

8 months ago

Hmm, I'm a bit unsure about this one. There are a few options that seem relevant, but I'm not totally confident in my understanding of the differences between them. Maybe I should re-read the question and options carefully.

upvoted 0 times

...

Aliza

8 months ago

This seems like a straightforward question about change management controls for a rapidly growing cloud-based IT company. I think the key is to focus on the specific scenario and requirements mentioned in the question.

upvoted 0 times

...

Jolanda

8 months ago

I'm a little confused by the wording of some of these options. They seem to cover a broad range of IT controls, not just change management. I'll need to make sure I'm interpreting the question correctly and focusing my answer on the specific requirement stated.

upvoted 0 times

...

Felice

8 months ago

Okay, let me think this through. I remember there's a tool specifically for creating and managing ODI domains, so I'm guessing that's the right answer here.

upvoted 0 times

...

Ricarda

2 years ago

Option A is the way to go, but I have to say, the idea of 'pre-approving' all cloud-based services for mobile devices in Option C just cracks me up. Good luck with that!

upvoted 0 times

...

Dianne

2 years ago

This is a no-brainer, Option A is the only sensible choice. I can't believe they're even considering anything else!

upvoted 0 times

Andrew

2 years ago

User 3: Yeah, it's crucial to have controls in place for changes in the production environment.

upvoted 0 times

...

Francis

2 years ago

User 2: I agree, it's important to establish policies and procedures for managing risks.

upvoted 0 times

...

Ciara

2 years ago

Option A is definitely the way to go.

upvoted 0 times

...

Alyce

2 years ago

Definitely Option A. Establishing clear change management processes is key to maintaining control as the company scales up their cloud-based solution.

upvoted 0 times

...

Brendan

2 years ago

I agree, Option A is the way to go. Controlling changes is crucial to ensure stability and reliability in the production environment.

upvoted 0 times

...

Walker

2 years ago

Option A seems like the right choice here. Proper policies and procedures for managing changes to critical applications and infrastructure are essential for a rapidly growing cloud-based company.

upvoted 0 times

Charlene

2 years ago

It's important to have controls in place to prevent any unauthorized software installations on company devices and infrastructure. Option B seems necessary as well.

upvoted 0 times

...

Gearldine

2 years ago

Definitely, having established policies and procedures for managing risks associated with changes is crucial for maintaining a stable production environment.

upvoted 0 times

...

Emeline

2 years ago

I agree, option A sounds like the best choice for managing changes in a growing cloud-based company.

upvoted 0 times

...

Desmond

2 years ago

I also think option A is the most suitable choice as it addresses the need for policies and procedures to manage risks associated with changes in the production environment.

upvoted 0 times

...

Margarita

2 years ago

Haha, Option C is a bit too specific. I doubt ABC's mobile devices or BYOD are the main concern here. They need a more comprehensive change control solution.

upvoted 0 times

Carole

2 years ago

Tandra: Definitely, it's important to have controls in place to ensure smooth operations.

upvoted 0 times

...

Tandra

2 years ago

I agree, having policies and procedures in place for managing risks associated with changes is crucial.

upvoted 0 times

...

Minna

2 years ago

I think Option A is the best choice for managing changes in the production environment.

upvoted 0 times

...

Graciela

2 years ago

I agree with Lavelle, option A seems like the most relevant control to implement in this scenario to manage changes in the production environment.

upvoted 0 times

...

Yesenia

2 years ago

I agree with Theola. This is the most relevant choice to ensure ABC can effectively manage the risks associated with changes in their production environment.

upvoted 0 times

Ciara

2 years ago

Option A seems like the most relevant choice for ABC's situation.

upvoted 0 times

...

Daren

2 years ago

Definitely, it's important for ABC to have controls in place for their growing company.

upvoted 0 times

...

Brittani

2 years ago

I agree, having policies and procedures in place for managing risks is crucial.

upvoted 0 times

...

Lashon

2 years ago

I think option A is the best choice.

upvoted 0 times

...

Theola

2 years ago

Option A sounds like a great fit for ABC's needs. Establishing clear policies and procedures for managing changes to critical applications and infrastructure is crucial for their rapidly growing business.

upvoted 0 times