An organization is required to demonstrate that every production change can be traced to an approved change request. The IT team uses a version control system for configuration files. What is the best way to ensure traceability between change requests and version control commits?

Rely on the change management system to automatically record all commits without any integration.

Require that every commit message includes the change request ID and link the commit to the change record in the change management system.

Allow developers to commit changes without any reference to change requests to speed up the process.

Use a separate version control repository for each change request to maintain traceability.

What is the purpose of a rollback plan in change implementation?

To eliminate the need for testing the change before implementation

To provide a set of steps to restore the system to its previous state if the change fails or causes issues

To accelerate the implementation of the change

To document the change for audit purposes

A team is evaluating version control systems for a new project. They need a system that supports branching and merging, works well with their existing CI/CD pipeline, and provides fine-grained access control. Which type of system best meets these requirements?

A distributed version control system like Git.

A database management system like MySQL.

A centralized version control system like Subversion (SVN).

A file-sharing service like Dropbox.

An organization wants to ensure that all changes to infrastructure-as-code templates are tracked and that any change can be reverted if it causes issues. What is the primary benefit of using version control for these templates?

It automatically deploys the templates to production without manual intervention.

It provides a complete history of changes, enabling rollback to any previous version.

It eliminates the need for change management processes.

It encrypts the templates to protect them from unauthorized access.

Which of the following is a typical responsibility of a Change Advisory Board (CAB)?

Performing the technical implementation of a change

Writing the rollback plan for every change

Approving all changes without review to speed up deployment

Evaluating the business and technical impact of a proposed change

EC-CouncilAssociate C|CISO

Domain 3Objective 4

Change Management and Version Control ACCISO Practice Questions (Page 5)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 21–25

21application · medium
An organization is required to demonstrate that every production change can be traced to an approved change request. The IT team uses a version control system for configuration files. What is the best way to ensure traceability between change requests and version control commits?
Select an answer first
22foundation · easy
What is the purpose of a rollback plan in change implementation?
Select an answer first
23application · medium
A team is evaluating version control systems for a new project. They need a system that supports branching and merging, works well with their existing CI/CD pipeline, and provides fine-grained access control. Which type of system best meets these requirements?
Select an answer first
24application · medium
An organization wants to ensure that all changes to infrastructure-as-code templates are tracked and that any change can be reverted if it causes issues. What is the primary benefit of using version control for these templates?
Select an answer first
25foundation · easy
Which of the following is a typical responsibility of a Change Advisory Board (CAB)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.