Discuss CSA CCSK Exam Topic 7 Question 75

CCM: A hypothetical start-up company called "ABC" provides a cloud based IT management solution. They are growing rapidly and therefore need to put controls in place in order to manage any changes in

their production environment. Which of the following Change Control & Configuration Management production environment specific control should they implement in this scenario?

APolicies and procedures shall be established for managing the risks associated with applying changes to business-critical or customer (tenant)-impacting (physical and virtual) applications and system-
system interface (API) designs and configurations, infrastructure network and systems components.

BPolicies and procedures shall be established, and supporting business processes and technical measures implemented, to restrict the installation of unauthorized software on organizationally-owned or
managed user end-point devices (e.g. issued workstations, laptops, and mobile devices) and IT infrastructure network and systems components.

CAll cloud-based services used by the company's mobile devices or BYOD shall be pre-approved for usage and the storage of company business data.

DNone of the above

Suggested Answer: A

Get Premium CCSK Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

40 comments · newest first

India 10 months ago

Wait, are they really not doing this already?

Lenna 11 months ago

B seems more relevant for endpoint security.

Pearly 11 months ago

Not sure if A is enough, what about user training?

Yvette 11 months ago

Totally agree, A covers all the bases!

Silvana 11 months ago

I think option A is crucial for managing risks.

Mona 12 months ago

I’m leaning towards option A too, but I wonder if there’s a chance they could need elements from option B as well. It's tough to say definitively!

Arlene 12 months ago

I think we had a practice question about cloud services and BYOD policies. Option C sounds familiar, but I'm not convinced it's the best fit here.

Louvenia 12 months ago

I'm not entirely sure, but I feel like option B could also be relevant since unauthorized software can really impact system stability.

Karrie 1 year ago

I remember we discussed the importance of managing risks with changes in production environments. I think option A might be the right choice since it focuses on business-critical applications.

Eloisa 1 year ago

Okay, I've got this. Based on the details provided, option A looks like the best choice. It specifically mentions managing risks associated with changes to business-critical applications and infrastructure, which is exactly what the company needs as they scale up their cloud operations.

Cassie 1 year ago

Hmm, I'm a bit unsure about this one. There are a few options that seem relevant, but I'm not totally confident in my understanding of the differences between them. Maybe I should re-read the question and options carefully.

Aliza 1 year ago

This seems like a straightforward question about change management controls for a rapidly growing cloud-based IT company. I think the key is to focus on the specific scenario and requirements mentioned in the question.

Jolanda 1 year ago

I'm a little confused by the wording of some of these options. They seem to cover a broad range of IT controls, not just change management. I'll need to make sure I'm interpreting the question correctly and focusing my answer on the specific requirement stated.

Felice 1 year ago

Okay, let me think this through. I remember there's a tool specifically for creating and managing ODI domains, so I'm guessing that's the right answer here.

Ricarda 2 years ago

Option A is the way to go, but I have to say, the idea of 'pre-approving' all cloud-based services for mobile devices in Option C just cracks me up. Good luck with that!

Dianne 2 years ago

This is a no-brainer, Option A is the only sensible choice. I can't believe they're even considering anything else!

Andrew 2 years ago

↳ replying to Dianne

User 3: Yeah, it's crucial to have controls in place for changes in the production environment.

Francis 2 years ago

↳ replying to Dianne

User 2: I agree, it's important to establish policies and procedures for managing risks.

Ciara 2 years ago

↳ replying to Dianne

Option A is definitely the way to go.

Alyce 2 years ago

Definitely Option A. Establishing clear change management processes is key to maintaining control as the company scales up their cloud-based solution.

Brendan 2 years ago

I agree, Option A is the way to go. Controlling changes is crucial to ensure stability and reliability in the production environment.

Walker 2 years ago

Option A seems like the right choice here. Proper policies and procedures for managing changes to critical applications and infrastructure are essential for a rapidly growing cloud-based company.

Charlene 2 years ago

↳ replying to Walker

It's important to have controls in place to prevent any unauthorized software installations on company devices and infrastructure. Option B seems necessary as well.

Gearldine 2 years ago

↳ replying to Walker

Definitely, having established policies and procedures for managing risks associated with changes is crucial for maintaining a stable production environment.

Emeline 2 years ago

↳ replying to Walker

I agree, option A sounds like the best choice for managing changes in a growing cloud-based company.

Desmond 2 years ago

I also think option A is the most suitable choice as it addresses the need for policies and procedures to manage risks associated with changes in the production environment.

Margarita 2 years ago

Haha, Option C is a bit too specific. I doubt ABC's mobile devices or BYOD are the main concern here. They need a more comprehensive change control solution.

Carole 2 years ago

↳ replying to Margarita

Tandra: Definitely, it's important to have controls in place to ensure smooth operations.

Tandra 2 years ago

↳ replying to Margarita

I agree, having policies and procedures in place for managing risks associated with changes is crucial.

Minna 2 years ago

↳ replying to Margarita

I think Option A is the best choice for managing changes in the production environment.

Graciela 2 years ago

I agree with Lavelle, option A seems like the most relevant control to implement in this scenario to manage changes in the production environment.

Yesenia 2 years ago

I agree with Theola. This is the most relevant choice to ensure ABC can effectively manage the risks associated with changes in their production environment.

Ciara 2 years ago

↳ replying to Yesenia

Option A seems like the most relevant choice for ABC's situation.

Daren 2 years ago

↳ replying to Yesenia

Definitely, it's important for ABC to have controls in place for their growing company.

Brittani 2 years ago

↳ replying to Yesenia

I agree, having policies and procedures in place for managing risks is crucial.

Lashon 2 years ago

↳ replying to Yesenia

I think option A is the best choice.

Theola 2 years ago

Option A sounds like a great fit for ABC's needs. Establishing clear policies and procedures for managing changes to critical applications and infrastructure is crucial for their rapidly growing business.

Broderick 2 years ago

↳ replying to Theola

Definitely, having established policies and procedures for managing changes is essential for a growing company like ABC.

Lilli 2 years ago

↳ replying to Theola

I agree, option A seems like the best choice for ABC's situation.

Lavelle 2 years ago

I think option A is the best choice because it focuses on managing risks associated with changes to critical applications and system configurations.

CSA CCSK Exam - Topic 7 Question 75 Discussion