Configuration Management System Processes for CISSP-ISSEP Exam

Configuration Management Processes

Question

Which of the following configuration management system processes defines which items will be configuration managed, how they are to be identified, and how they are to be documented.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

The correct answer is D. Configuration identification.

Configuration management is a systematic approach to identifying, organizing, and controlling changes to the characteristics of a product or system. It involves the identification of items that need to be managed and the establishment of controls to ensure that changes to those items are properly tracked, evaluated, and approved.

Configuration identification is the process of identifying the configuration items that will be managed, how they will be identified, and how they will be documented. This includes the creation of unique identifiers for each configuration item, such as version numbers or serial numbers, and the establishment of naming conventions to ensure consistency in documentation.

Configuration identification also involves identifying the relationships between configuration items and the dependencies between them. This allows for proper tracking of changes and ensures that changes made to one configuration item do not have unintended consequences on other items within the system.

Configuration control is the process of reviewing and approving changes to configuration items. Configuration verification and audit is the process of reviewing the configuration items to ensure that they conform to the established requirements and standards. Configuration status accounting is the process of recording and reporting the status of configuration items throughout the development lifecycle.

Therefore, the correct answer is D. Configuration identification defines which items will be configuration managed, how they are to be identified, and how they are to be documented.