A development team is using a version control system to manage a web application. The team wants to create a stable release candidate that can be used for deployment, and they want to be able to easily identify this specific version in the future. Which version control feature should the team use?

Using a descriptive commit message for the release.

Merging all feature branches into the main branch.

Creating a new branch for the release candidate.

Tagging the commit with a release version number.

A security team maintains firewall configuration scripts in a Git repository. A junior engineer accidentally pushed a change that removes a critical access control list (ACL). The team needs to restore the previous version of the script quickly. What is the most appropriate action?

Use git revert to create a new commit that undoes the accidental change, preserving the commit history.

Delete the repository and re-clone it from the remote backup.

Manually edit the script to re-add the ACL and commit the fix without any reference to the accidental change.

Use git reset --hard to delete the accidental commit and all subsequent commits from the repository.

A company has a DR plan that has never been tested. The DR coordinator proposes a full interruption test, but the business operations manager objects because it will cause downtime. The CISO must decide. What is the best course of action?

Cancel the test to avoid any disruption to business operations.

Only perform a checklist review of the DR plan and consider it tested.

Conduct a full interruption test immediately without notifying the business.

Conduct a tabletop exercise first, then schedule a full interruption test during a planned maintenance window.

What does Recovery Point Objective (RPO) define in disaster recovery planning?

The time required to test the disaster recovery plan

The maximum acceptable amount of data loss measured in time

The minimum amount of data that must be backed up daily

The maximum time allowed to restore systems after a disaster

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 4

Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 3)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

11concepts

Questions 11–15

11application · medium
A development team is using a version control system to manage a web application. The team wants to create a stable release candidate that can be used for deployment, and they want to be able to easily identify this specific version in the future. Which version control feature should the team use?
Select an answer first
12application · medium
A security team maintains firewall configuration scripts in a Git repository. A junior engineer accidentally pushed a change that removes a critical access control list (ACL). The team needs to restore the previous version of the script quickly. What is the most appropriate action?
Select an answer first
13expert · hard
A company has a DR plan that has never been tested. The DR coordinator proposes a full interruption test, but the business operations manager objects because it will cause downtime. The CISO must decide. What is the best course of action?
Select an answer first
14application · easy
A development team uses Git for a security tool. They need to maintain a stable release branch while allowing developers to work on new features without affecting the stable version. Which Git feature should they use?
Select an answer first
15foundation · easy
What does Recovery Point Objective (RPO) define in disaster recovery planning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.