SAC Documentation & Record Management 3 — Questions and Answers
Question 1: Which document should be referenced FIRST when onboarding a new system administrator to an existing environment?
- Incident log from the past 90 days
- Standard Operating Procedures (SOPs) (Correct answer)
- Vendor sales contracts
- User acceptance testing reports
Correct answer: Standard Operating Procedures (SOPs)
SOPs provide standardized, approved procedures for routine tasks and are the authoritative starting point for new admins.
Question 2: In change management documentation, what does the 'rollback plan' section describe?
- Steps to undo the change if it causes problems (Correct answer)
- Approvals required before the change can proceed
- The testing methodology used prior to deployment
- A list of stakeholders notified about the change
Correct answer: Steps to undo the change if it causes problems
The rollback plan documents the specific steps to revert a change and restore the previous state if the change fails.
Question 3: A company must prove to auditors that all privileged access is reviewed quarterly. Which record type best satisfies this requirement?
- Firewall rule export
- Access review attestation logs (Correct answer)
- Network performance reports
- Patch compliance dashboards
Correct answer: Access review attestation logs
Access review attestation logs document who reviewed access rights, what was found, and what actions were taken, satisfying audit requirements.
Question 4: Which of the following BEST describes semantic versioning (SemVer) as applied to documentation?
- Using dates as version numbers (YYYY-MM-DD)
- Major.Minor.Patch numbering where major changes break backward compatibility (Correct answer)
- Incrementing a single integer for every save
- Tagging documents by department code and sequence number
Correct answer: Major.Minor.Patch numbering where major changes break backward compatibility
SemVer uses Major.Minor.Patch to signal the scope of changes; a major version bump indicates breaking or significant changes.
Question 5: What is the recommended approach for handling sensitive passwords in system documentation?
- Embed them in plain text within the runbook for quick access
- Reference a secrets manager or vault and never store passwords in docs (Correct answer)
- Store them in a password-protected spreadsheet attached to the runbook
- Include only the first and last characters with asterisks in between
Correct answer: Reference a secrets manager or vault and never store passwords in docs
Passwords should never appear in documentation; instead, reference a secrets manager so credentials can be rotated without updating docs.
Question 6: Which metric is MOST relevant when evaluating the quality of a knowledge base?
- Total number of articles published
- Article defect rate (incorrect or outdated articles) (Correct answer)
- Average article word count
- Number of article editors with write access
Correct answer: Article defect rate (incorrect or outdated articles)
The defect rate—articles that contain errors or outdated information—directly measures whether the knowledge base can be trusted.
Question 7: When documenting a disaster recovery plan (DRP), what does RTO stand for?
- Recovery Time Objective (Correct answer)
- Redundancy Transfer Operation
- Real-Time Output
- Residual Threat Outcome
Correct answer: Recovery Time Objective
Recovery Time Objective (RTO) defines the maximum acceptable downtime before a system must be restored after a disaster.
SAC Documentation & Record Management 3
Which document should be referenced FIRST when onboarding a new system administrator to an existing environment?