CompTIA CASP+ (CAS-004) — Question 536

A client is adding scope to a project. Which of the following processes should be used when requesting updates or corrections to the client's systems?

Answer options

• A. The implementation engineer requests direct approval from the systems engineer and the Chief Information Security Officer.
• B. The change control board must review and approve a submission.
• C. The information system security officer provides the systems engineer with the system updates.
• D. The security engineer asks the project manager to review the updates for the client's system.

Correct answer: B

Explanation

The correct answer is B because the change control board is responsible for assessing and approving changes to project scope, ensuring that all modifications are properly evaluated. The other options involve individuals or roles that do not have the authority or process in place to approve changes, making them incorrect in this context.