What is the primary purpose of the post-implementation review (PIR) phase in a formal change management process?

To assign a priority and category to the change for scheduling purposes

To document the initial request and business justification for the change

To evaluate whether the change achieved its intended outcomes and to identify lessons learned

To approve the change request before any implementation work begins

What is the primary role of a Change Advisory Board (CAB) in the change management process?

To implement approved changes in the production environment

To develop the technical solution for every change

To evaluate and approve changes based on risk, impact, and business needs

To document all changes in the configuration management database (CMDB)

Which document in change management describes the potential effects of a change on systems, users, and business processes?

Post-implementation review report

A security analyst is updating a security policy document. The analyst wants to ensure that previous versions of the policy are preserved and that changes are attributable to specific individuals. What should the analyst use?

A shared network drive with the file name including the date

A wiki page that anyone can edit without logging in

A version control system with commit messages and user authentication

An email thread with attachments of each version

What is the primary purpose of disaster recovery testing?

To certify that the organization will never experience a disaster

To ensure that all systems are always available without downtime

To validate that recovery procedures work and personnel are prepared

To eliminate the need for backups

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 4

Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 1)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

11concepts

Questions 1–5

1foundation · easy
What is the primary purpose of the post-implementation review (PIR) phase in a formal change management process?
Select an answer first
2foundation · easy
What is the primary role of a Change Advisory Board (CAB) in the change management process?
Select an answer first
3foundation · easy
Which document in change management describes the potential effects of a change on systems, users, and business processes?
Select an answer first
4application · medium
A security analyst is updating a security policy document. The analyst wants to ensure that previous versions of the policy are preserved and that changes are attributable to specific individuals. What should the analyst use?
Select an answer first
5foundation · easy
What is the primary purpose of disaster recovery testing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.