A security team is managing firewall configuration files using a version control system. The team has a policy that all changes must be reviewed before being committed to the main branch. However, a recent incident required an emergency change to block an active attack, and the change was committed directly to the main branch without review. What is the most appropriate follow-up action?

Retroactively approve the change without any further action.

Disable the review requirement for all changes to avoid future delays.

Revert the emergency change immediately to restore the review process.

Document the emergency change, conduct a post-incident review, and implement a process for emergency changes that includes retrospective review.

A security operations center (SOC) discovers a critical firewall rule misconfiguration that is actively blocking all outbound traffic from a production segment. The change management policy requires all changes to be reviewed by the Change Advisory Board (CAB). The SOC manager needs to restore service immediately. What should the SOC manager do?

Disable the firewall rule entirely and then submit a normal change request to re-enable it later.

Ask the network team to bypass the change process because the change is a rollback, not a new change.

Submit a standard change request and wait for the next CAB meeting to approve the rollback.

Implement the rollback immediately as an emergency change, then document it and notify the CAB after the fact.

In version control, what is the purpose of branching?

To assign a unique label to a specific version for release

To permanently delete old versions of files

To combine changes from different branches into a single branch

To create an independent line of development for new features or experiments

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 4

Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 11)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

11concepts

Questions 51–53

51expert · medium
A security team is managing firewall configuration files using a version control system. The team has a policy that all changes must be reviewed before being committed to the main branch. However, a recent incident required an emergency change to block an active attack, and the change was committed directly to the main branch without review. What is the most appropriate follow-up action?
Select an answer first
52application · medium
A security operations center (SOC) discovers a critical firewall rule misconfiguration that is actively blocking all outbound traffic from a production segment. The change management policy requires all changes to be reviewed by the Change Advisory Board (CAB). The SOC manager needs to restore service immediately. What should the SOC manager do?
Select an answer first
53foundation · easy
In version control, what is the purpose of branching?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 11)

Questions 51–53

In version control, what is the purpose of branching?

Keep studying — Security Program Management and Operations