Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is updating its incident response playbooks. The security team wants to ensure that any changes to the playbooks are traceable and that the DR site uses the same version. What should the team implement?

   • AStore the playbooks in a version control system and use the same repository for the DR site.
   • BEmail the latest playbook to the DR site manager each time it changes.
   • CKeep the playbooks on a shared drive with no version history.
   • DPrint the playbooks and store them in a binder at both sites.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A large healthcare organization is implementing a formal change management process. The Chief Information Security Officer (CISO) wants to ensure that the Change Advisory Board (CAB) includes members who can assess the security, operational, and business impact of proposed changes. Which composition of the CAB would best meet this objective?

   • AA team composed solely of senior IT managers who have the authority to approve all changes.
   • BA group of external consultants who can provide an independent perspective on all proposed changes.
   • CA cross-functional team including representatives from security, IT operations, application development, and business unit stakeholders.
   • DA single change manager who reviews and approves all changes to ensure consistency and speed.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A configuration management team is using a version control system to manage infrastructure-as-code scripts. The team has been experiencing issues where multiple engineers are overwriting each other's changes, and it is difficult to determine who made a specific change and why. Which set of version control best practices would most directly address these issues?

   • ADisable commit history to reduce clutter and rely on file naming conventions to track changes.
   • BEnforce a branching strategy, require descriptive commit messages, and implement access controls.
   • CGrant all engineers full write access to the repository to avoid permission-related delays.
   • DUse a single shared branch and rely on the version control system's automatic merge capabilities.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A database administrator (DBA) needs to apply a patch to a production database. The change management process requires a change request, impact assessment, and rollback plan. The DBA has completed the technical steps but has not yet updated the rollback plan. What should the DBA do before submitting the change for approval?

   • ASkip the change request and apply the patch directly because the DBA is the system owner.
   • BSubmit the change request without the rollback plan because the patch is well-tested in the lab.
   • CComplete the rollback plan, including the specific steps to restore the previous database version, and then submit the change request.
   • DAsk the CAB to approve the change and then write the rollback plan during implementation.
   Reveal Solution Discussion Select an answer first
6. 20expert · medium

   A company has a mature change management process and a version control system for its infrastructure code. The company is updating its disaster recovery plan to include new recovery procedures. The CISO wants to ensure that the DR plan is always aligned with the current state of the infrastructure. Which approach best achieves this?

   • AHave the DR plan reviewed annually by the CAB, regardless of infrastructure changes.
   • BCreate a new DR plan every time the infrastructure changes, without version control.
   • CStore the DR plan in the same version control system as the infrastructure code and require that changes to the DR plan go through the change management process.
   • DUpdate the DR plan manually after each infrastructure change and store it on a shared drive.
   Reveal Solution Discussion Select an answer first