Certified Information Systems Auditor (CISA) — Question 210

Which of the following is the PRIMARY reason to follow a configuration management process to maintain applications?

Answer options

• A. To optimize system resources
• B. To optimize asset management workflows
• C. To ensure proper change control
• D. To follow system hardening standards

Correct answer: C

Explanation

The correct answer is C, as ensuring proper change control is essential for maintaining stability and reliability in applications. Options A and B, while important, are secondary benefits of configuration management rather than the primary reason. Option D relates to security practices but does not directly address the main purpose of configuration management.