Professional Standards & Competencies Flashcards

Which of the following best describes 'separation of duties' in a Windows Server environment?

Answer: Ensuring no single person can complete a sensitive task without another person's involvement

Separation of duties requires that critical processes involve multiple individuals, reducing the risk of fraud or error by a single administrator.

A company must retain server event logs for seven years due to financial audit regulations. Which competency area does designing this retention architecture fall under?

Answer: Compliance and regulatory adherence

Designing log retention to meet audit timelines is a core competency within compliance and regulatory adherence for infrastructure architects.

During a post-incident review (PIR) of a server outage, the team discovers the root cause was an undocumented manual change. Which professional process, if followed, would most likely have prevented this?

Answer: Enforcing a formal change management process requiring pre-approval and documentation

A formal change management process requires documentation and approval before any production change, creating an audit trail that prevents undocumented modifications.

An architect is asked to recommend a server deployment in a new country where data sovereignty laws prohibit transferring personal data outside national borders. Which professional responsibility is most relevant?

Answer: Understanding and complying with local data residency and privacy regulations

Data sovereignty laws are legal requirements that architects must understand and design for when deploying infrastructure across jurisdictions.

A junior engineer proposes skipping documentation to meet a tight deployment deadline. As the senior architect, what is the most professionally responsible response?

Answer: Reject the proposal and advocate for adequate time to produce essential documentation

Professional standards require adequate documentation as part of delivery; skipping it creates long-term operational and security risks that outweigh short-term schedule gains.

Which professional certification body publishes the 'Code of Ethics and Professional Conduct' that many IT infrastructure professionals are expected to follow?

Answer: ISC²

ISC² publishes a widely recognized Code of Ethics that certified professionals, including CISSPs, are required to uphold.

When a server infrastructure design includes third-party cloud services, which professional artifact formally defines each party's responsibilities for availability, security, and support?

Answer: Service Level Agreement (SLA) and shared responsibility matrix

An SLA combined with a shared responsibility matrix formally delineates what the cloud provider and customer each own for uptime, security, and incident response.