Change Management and Version Control ACCISO Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is the primary function of a Change Advisory Board (CAB)?

   • ATo develop all software code changes for the organization
   • BTo monitor network traffic for unauthorized changes
   • CTo review and approve changes, ensuring they are assessed for risk and impact before implementation
   • DTo implement approved changes directly in the production environment
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the process of integrating changes from one branch into another called?

   • AStaging
   • BMerging
   • CForking
   • DCloning
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A large enterprise has a Change Advisory Board (CAB) that meets weekly to review normal changes. An emergency change is required to fix a critical security vulnerability in a customer-facing application. The change must be implemented within the hour to prevent exploitation. The CAB chair is unavailable, and the normal emergency approval process requires the chair's sign-off. What is the most appropriate action?

   • AImplement the change immediately and obtain retroactive approval from the CAB chair as soon as possible.
   • BHave the change manager approve the change on behalf of the CAB chair.
   • CDelay the change until the CAB chair is available, even if it means the vulnerability remains exposed.
   • DEscalate to the CEO for approval.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   An organization's version control system (Git) contains sensitive configuration files, including production database credentials. The security team has discovered that a former employee's account was not deactivated and may have been used to clone the repository. The organization wants to prevent future unauthorized access and ensure that any changes are traceable. What is the most important immediate action?

   • AEnable two-factor authentication for all users.
   • BRevoke the former employee's access and rotate all credentials that were stored in the repository.
   • CDelete the repository and recreate it from a backup.
   • DChange the repository URL and require all developers to re-clone the repository.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A network administrator needs to update the firewall rules to allow a new service. The change is low risk and has been performed many times before. According to change management best practices, what is the most appropriate way to handle this change?

   • ATreat it as an emergency change and implement it immediately without documentation.
   • BClassify it as a standard change and follow a pre-approved, documented procedure.
   • CSkip the change management process because the change is low risk.
   • DSubmit it as a normal change and wait for the next CAB meeting.
   Reveal Solution Discussion Select an answer first