How does version control support disaster recovery?

By automatically replicating data to an offsite location in real time

By providing a historical record that can be used to restore configurations or code to a known-good state

By preventing any data loss from occurring

By eliminating the need for disaster recovery planning

A security team needs to deploy a critical security patch to all production servers. The patch is known to fix a zero-day vulnerability that is being actively exploited. The change management policy requires CAB approval for all changes, but the CAB is not scheduled to meet for two days. What should the team do?

Deploy the patch without any approval because it is a security patch.

Send an email to the CAB members and wait for all of them to reply with approval.

Wait for the next CAB meeting to approve the change, even though the vulnerability is being exploited.

Classify the change as an emergency change, obtain approval from the CAB chair or designated authority, and deploy immediately.

A software development team is using a version control system with a main branch and feature branches. The team has a policy that all changes must be reviewed via pull requests before merging into the main branch. However, a developer accidentally pushed a change directly to the main branch, bypassing the review process. What is the most appropriate immediate action?

Disable direct pushes to the main branch to prevent future occurrences.

Leave the change in place and conduct a retrospective review.

Approve the change retroactively without any further action.

Revert the change and require the developer to submit a pull request for review.

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 4

Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 2)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

11concepts

Questions 6–10

6foundation · easy
How does version control support disaster recovery?
Select an answer first
7expert · hard
A security team needs to deploy a critical security patch to all production servers. The patch is known to fix a zero-day vulnerability that is being actively exploited. The change management policy requires CAB approval for all changes, but the CAB is not scheduled to meet for two days. What should the team do?
Select an answer first
8expert · medium
A software development team is using a version control system with a main branch and feature branches. The team has a policy that all changes must be reviewed via pull requests before merging into the main branch. However, a developer accidentally pushed a change directly to the main branch, bypassing the review process. What is the most appropriate immediate action?
Select an answer first
9foundation · easy
In a formal change management process, which phase immediately follows the approval of a change request?
Select an answer first
10foundation · easy
Which disaster recovery strategy provides a fully equipped alternate site that can be operational within a very short time, often within hours?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 2)

Questions 6–10

How does version control support disaster recovery?

In a formal change management process, which phase immediately follows the approval of a change request?

Which disaster recovery strategy provides a fully equipped alternate site that can be operational within a very short time, often within hours?

Keep studying — Security Program Management and Operations