MENU
An organization uses one centralized single sign-on (SSO) control to cover many applications. Which of the following is the BEST course of action when a new application is added to the environment after testing of the SSO control has been completed?
Suggested Answer: A
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
23 comments · newest first
BE
Beth
10 months ago
I doubt D is sufficient for new apps.
CH
Chantay
11 months ago
Surprised that people aren't considering A!
LA
Lashandra
11 months ago
Retesting the full control seems excessive.
KA
Katheryn
11 months ago
I disagree, C is the way to go!
LE
Lenna
11 months ago
I think option B makes the most sense.
NO
Noah
12 months ago
I think option D makes sense too, especially if the next assessment is coming up soon. It might be less disruptive than a full retest.
JI
Jina
12 months ago
I’m leaning towards option B because it seems logical to test the new application directly, but I worry about missing broader implications.
DO
Dorothy
12 months ago
I remember a similar question where we had to decide whether to retest or just review documentation. I feel like option C could be a good first step.
MI
Miss
1 year ago
I think we might need to retest the full control if the new application could impact the SSO functionality, but I'm not entirely sure.
JO
Johana
1 year ago
I feel pretty confident that reviewing the change control documentation is the best course of action here. That should give us the information we need to determine the appropriate next steps, whether that's a full retest or something more targeted.
ST
Stephen
1 year ago
Retest the control using the new application as the only sample? That seems like a pretty narrow approach to me. I'd want to make sure the control is still working properly across all the applications, not just the new one.
JA
Janna
1 year ago
Hmm, I'm a bit unsure about this one. Adding a new application to the environment could potentially impact the SSO control in unexpected ways, so I'm leaning towards a full retest to be on the safe side.
GE
Gerri
1 year ago
I think the best approach here is to review the change control documentation to see how the new application was integrated with the SSO control. That should give us a good starting point to determine if a full retest is necessary or if a more targeted approach would be sufficient.
TY
Ty
1 year ago
Hmm, I'm not sure about this one. I'm debating between B and E. Oversubscribing CPU resources could work, but enabling simultaneous multithreading might be the better option. I'll have to think this through a bit more.
RO
Rodolfo
1 year ago
Hmm, I'm a bit confused by all the details in this question. I'll need to make sure I understand the key terms and concepts like notional principal, credit risk, and netting agreements before I can tackle this.
JO
Joni
1 year ago
That sounds familiar! I remember something about humped curves but can't recall if it flattens or just shifts. Maybe it's like when we did that practice question on changes in interest rates affecting the curve.
SH
Shala
1 year ago
I vaguely recall we discussed nested groups in class. From what I remember, option D about groups being nested should be true.
EL
Elvera
2 years ago
I think re-evaluating the control during the next assessment is a good compromise.
WI
Willard
2 years ago
We should review the change control documentation to see if any updates are needed.
EL
Elliot
2 years ago
But what if there are unforeseen issues with the new application?
SH
Shonda
2 years ago
I agree with Elvera, retesting the full control seems unnecessary.
EL
Elvera
2 years ago
I disagree, I believe testing with the new application alone is sufficient.
EL
Elliot
2 years ago
I think we should retest the full control just to be safe.