Exam CAS-004 topic 1 question 595 discussion

Actual exam question from CompTIA's CAS-004

Question #: 595
Topic #: 1

An external auditor noted that a company made changes to the core product and infrastructure that were not documented and approved. The management team must respond to this exception and create a plan to avoid this situation. Which of the following would best prevent recurrence?

A. Revising the change control policy to make sure all changes are documented
B. Leveraging an enterprise resource planning tool to track changes
C. Designating a change manager to approve all changes that needs to be made
D. Using a customer relationship management tool to document production changes

Show Suggested Answer

Suggested Answer: A 🗳️

by Steel16 at March 11, 2025, 12:16 p.m.

Comments

Submit Cancel

Steel16

3 months, 3 weeks ago

Selected Answer: A

o Policy Enforcement: Revising the change control policy ensures that there are clear guidelines and procedures for documenting and approving all changes. This creates a formal process that everyone must follow. o Accountability: A well-defined policy holds individuals accountable for adhering to the change management process, reducing the likelihood of unauthorized changes. o Consistency: A revised policy ensures that all changes, regardless of their nature, are consistently documented and approved, maintaining the integrity of the product and infrastructure.

upvoted 2 times

Steel16

3 months, 3 weeks ago

o B. Leveraging an ERP (enterprise resource planning) Tool: This can help track changes but won't necessarily enforce the documentation and approval process. o C. Designating a Change Manager: This adds a layer of oversight but doesn't ensure that all changes are documented and approved unless supported by a robust policy. o D. Using a CRM (customer relationship management ) Tool : This is not typically designed for tracking production changes and may not be the best fit for this purpose.

upvoted 2 times

...