Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CSSLP Exam - Topic 3 Question 66 Discussion

Posted by Ernie on Mar 20, 2023 at 01:28 PM

Which of the following components of configuration management involves periodic checks to determine the consistency and completeness of accounting information and to verify that all configuration management policies are being followed?

Suggested Answer: B

Configuration auditing is a component of configuration management, which involves periodic checks to establish the consistency and

completeness of accounting information and to confirm that all configuration management policies are being followed. Configuration audits are

broken into functional and physical configuration audits. They occur either at delivery or at the moment of effecting the change. A functional

configuration audit ensures that functional and performance attributes of a configuration item are achieved, while a physical configuration

audit ensures that a configuration item is installed in accordance with the requirements of its detailed design documentation.

Answer D is incorrect. The configuration status accounting procedure is the ability to record and report on the configuration baselines

associated with each configuration item at any moment of time. It supports the functional and physical attributes of software at various points

in time, and performs systematic control of accounting to the identified attributes for the purpose of maintaining software integrity and

traceability throughout the software development life cycle.

Answer C is incorrect. Configuration control is a procedure of the Configuration management. Configuration control is a set of

processes and approval stages required to change a configuration item's attributes and to re-baseline them. It supports the change of the

functional and physical attributes of software at various points in time, and performs systematic control of changes to the identified attributes.

Answer A is incorrect. Configuration identification is the process of identifying the attributes that define every aspect of a configuration

item. A configuration item is a product (hardware and/or software) that has an end-user purpose. These attributes are recorded in

configuration documentation and baselined. Baselining an attribute forces formal configuration change control processes to be effected in the

event that these attributes are changed.


Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
TE
Tegan 11 months ago
I thought it was A at first, but B is more accurate.
AM
Amber 11 months ago
Nah, I think it's C, Configuration Control.
XO
Xochitl 12 months ago
Wait, is it really just about auditing? Seems too simple.
CH
Chantay 12 months ago
I agree, B makes the most sense.
KI
Kimberlie 12 months ago
It's definitely B, Configuration Auditing!
TR
Tracie 1 year ago
I'm leaning towards Configuration Auditing too, but I keep mixing it up with Configuration Identification. Need to double-check my notes!
DE
Derick 1 year ago
Configuration Status Accounting seems like it could be related, but I feel like it focuses more on tracking rather than the auditing process.
CA
Cassi 1 year ago
I remember practicing a similar question, and I think Configuration Control was more about managing changes rather than auditing.
OC
Octavio 1 year ago
I think the answer might be Configuration Auditing, but I'm not entirely sure. It sounds like the right fit for checking consistency and completeness.
PE
Peggie 1 year ago
Based on my experience, the best approach for mutual VPN gateway authentication is to use a combination of PKI certificates and dynamic OTP. This ensures a high level of security while also being practical to implement and maintain.
RO
Royal 1 year ago
Hmm, this is a lot of information to cover in the contract. I'll need to make sure I don't miss any of the important details like the scope, principles, requirements, and delivery plan.
CU
Curtis 1 year ago
I'm leaning towards option A - the combination of SAS 10K and FMD drives in an HDT pool seems like it would provide the consistent performance the application needs. The low hit rates make me think we don't need the full power of an all-FMD pool.
LO
Louvenia 1 year ago
Hmm, this is a tricky one. I'm not sure if the HTTP(S) load balancer would preserve the source IP since it operates at a higher layer.
0/2000 characters

Save Cancel