Memory cue
Last-day cue
A.8.19 = control what gets installed in production. A.8.20 = secure and manage the network paths that protect systems and applications.
What the exam is likely testing
| Control | Exam cue |
|---|---|
| A.8.19 | Authorization, testing, logging, rollback, licences, and support for operational software |
| A.8.20 | Network architecture, device security, zoning, routing, monitoring, virtual/cloud networks, and public exposure |
Common wrong answers
- Treating developer skill as a substitute for production change control.
- Assuming emergency production changes do not need records.
- Treating licence and support checks as unrelated to security.
- Treating firewall rules as the whole of network security.
- Ignoring virtual networks, administrative networks, backup links, or hypervisors.
- Assuming network diagrams prove actual network control.
Related notes
- Iso27001
- Exam
- Software installation
- Network security
Note Metadata
Aliases: EXAM-035
Source: 09-Exam-Preparation/EXAM-035-Software-Installation-and-Network-Security.md