Certified Information Systems Auditor (CISA) — Question 962

Which of the following is a core functionality of a configuration and release management system?

Answer options

• A. Identifying other configuration items that will be impacted by a given change
• B. Identifying vulnerabilities in configuration settings
• C. Deploying a configuration change to the sandbox environment
• D. Managing privileged access to databases, servers, and infrastructure

Correct answer: A

Explanation

The correct answer, A, emphasizes the importance of understanding how changes affect other configuration items, which is crucial for maintaining system integrity. Options B, C, and D represent important activities but do not directly relate to the core functionality of configuration and release management, which primarily focuses on change impact assessment.