SAC Documentation & Record Management 2 — Questions and Answers
Question 1: Which document type defines the step-by-step actions required to restore a service after an outage?
- Business Continuity Plan
- Runbook (Correct answer)
- Change Request Form
- Risk Register
Correct answer: Runbook
A runbook contains detailed, step-by-step operational procedures for restoring or maintaining a service.
Question 2: When a configuration item is decommissioned, what is the correct action in the CMDB?
- Delete the record immediately
- Mark the record as retired/decommissioned and retain it (Correct answer)
- Archive to a separate offline database with no links
- Remove all relationships but keep the base record unchanged
Correct answer: Mark the record as retired/decommissioned and retain it
Decommissioned CIs should be marked retired in the CMDB so historical data and audit trails are preserved.
Question 3: What is the primary purpose of a knowledge base article (KBA) in an IT environment?
- Track software license compliance
- Capture incident tickets for SLA measurement
- Provide reusable solutions for known issues (Correct answer)
- Store raw log files from production servers
Correct answer: Provide reusable solutions for known issues
KBAs document known issues and proven solutions so support staff can resolve recurring problems quickly.
Question 4: A sysadmin is asked to document network topology. Which diagram type BEST shows IP addressing and subnet boundaries?
- Logical network diagram (Correct answer)
- Physical rack diagram
- Gantt chart
- Entity-relationship diagram
Correct answer: Logical network diagram
A logical network diagram illustrates IP addressing schemes, VLANs, and subnet boundaries without physical layout detail.
Question 5: Which version control practice ensures that documentation changes are traceable to a specific author and timestamp?
- File locking
- Committing changes with descriptive messages (Correct answer)
- Storing files in a shared network drive
- Using read-only permissions on all documents
Correct answer: Committing changes with descriptive messages
Committing changes to a version control system with descriptive messages creates an auditable history including author and timestamp.
Question 6: Which element is MOST critical to include in a post-incident report?
- A list of all users affected by the incident
- Root cause analysis and corrective actions (Correct answer)
- The vendor contact list for escalation
- The patch notes from the last maintenance window
Correct answer: Root cause analysis and corrective actions
Root cause analysis and corrective actions are essential to prevent recurrence and improve future incident response.
Question 7: What does a data retention policy primarily govern?
- How long backups are kept before deletion (Correct answer)
- The encryption standard used for data at rest
- Access control lists for sensitive directories
- The frequency of vulnerability scans
Correct answer: How long backups are kept before deletion
A data retention policy defines how long specific categories of data must be stored before they can be securely deleted.
SAC Documentation & Record Management 2
Which document type defines the step-by-step actions required to restore a service after an outage?