Certified Secure Software Lifecycle Professional (CSSLP) — Question 34

Which of the following are the primary functions of configuration management?
Each correct answer represents a complete solution. Choose all that apply.

Answer options

• A. It removes the risk event entirely by adding additional steps to avoid the event.
• B. It ensures that the change is implemented in a sequential manner through formalized testing.
• C. It reduces the negative impact that the change might have had on the computing services and resources.
• D. It analyzes the effect of the change that is implemented on the system.

Correct answer: A

Explanation

The correct answer is A because configuration management aims to prevent risk events by implementing proactive measures. Options B, C, and D describe the processes and outcomes of managing changes rather than directly addressing risk elimination.