Deck 21: Change Management

Question 1

Change management can be applied to every type of software development EXCEPT:

A)Security patches
B)Source code
C)Web pages
D)Change management should be applied to all types of software development.

Answer 1

D

Question 2

An organization must choose between using Capability Maturity Model Integration (CMMI)or change management.

Answer 2

False

Question 3

Change control prevents inadvertent overwriting of critical reference data.

Answer 3

True

Question 4

What is the key concept in change management?

A)Least privilege
B)Separation of duties
C)Defense in depth
D)Redundancy

Question 5

Whenever a modified program is moved to the production source-code library,the executable version is moved to the production system.This is an example of which of the following?

A)Authenticode
B)Code integrity
C)Separation of duties
D)Output code variation

Question 6

Which of the following is the first step in change management?

A)Configuration control
B)Configuration status accounting
C)Configuration identification
D)Configuration audit

Question 7

Configuration status accounting consists of the procedures for tracking and maintaining data relative to each configuration item in the baseline.

Question 8

Change management is only needed in the development and testing phases of the systems life cycle.

Question 9

Change management makes localization efforts more complex.

Question 10

Change management and configuration management are two very different processes.

Question 11

Despite all the benefits from separation of duties,the biggest disadvantage is that the people who know the software best (the developers,designers,and testers)are not the ones that install and administer the software.

Question 12

A(n)_________ is used by the change control board to track changes.

A)Situation process report
B)Software problem report
C)Segregated personnel responsibilities
D)System progress report

Question 13

Network and system administrators use change management to ensure configurations consistently meet security standards.

Question 14

________________ serves as a foundation for comparison or measurement.

A)Configuration identification
B)Configuration status accounting
C)Baseline
D)Configuration items

Question 15

Which of the following is true about change control boards?

A)They are made up of non-administrative staff to prevent bias in decision making.
B)They should meet annually to revise the change control executive plan.
C)They should facilitate adequate change management oversight and better coordination between projects.
D)They are only necessary in extremely large corporations that wish to maintain standards across multinational divisions.

Question 16

Change management is the process of changing the middle managers in a company during a merger.

Question 17

All access to systems,software,and data should be assigned using what principle?

A)Least privilege
B)Role-based access
C)Minimum use
D)Activity-based access

Question 18

A configuration item is an asset that needs to be controlled or managed.

Question 19

What is configuration control?

A)Ensures that configuration items are built and maintained according to the requirements,standards,or contractual agreements
B)Ensures that only approved changes to a baseline are allowed to be implemented
C)Ensures all changes made separate from the baseline are well documented and controlled
D)Identifies which assets need to be controlled.

Question 20

What is configuration auditing?

A)Ensures that configuration items are built and maintained according to the requirements,standards,or contractual agreements
B)Ensures that only approved changes to a baseline can be implemented
C)Ensures all changes made separate from the baseline are well documented and controlled
D)Identifies which assets need to be controlled

Question 21

What is the importance of a baseline to change management?

Question 22

_______________ is an important means by which errors and fraudulent or malicious acts can be discouraged and prevented.

Question 23

Explain how change management is an important enterprise management tool.

Question 24

What are the concepts of the capability maturity model integration?

Question 25

A(n)______________ is used to track changes through the change control board.

Question 26

The SEI's webpage defines ______________ capability levels.

Question 27

_______________ refers to a standard methodology for performing and recording changes during software development and system operation.

Question 28

Configuration _______________ is the process of verifying that the configuration items are built and maintained according to the requirements,standards,or contractual agreements.

Question 29

What are the essential elements of change management?

Question 30

_______________ is the process of controlling changes to items that have been baselined.

Question 31

The _______________ checks out source code from the code-control tool archive to the development system.

Question 32

Upon manager approval,the _______________ moves the executable to the production system.

Question 33

Configuration status _______________ consists of the procedures for tracking and maintaining data relative to each configuration item in the baseline.

Question 34

_____________ is the process of identifying which assets need to be managed and controlled.

Question 35

How does the principle of "separation of duties" apply to change management?