An organization is implementing a new change management process. The CISO wants to ensure that all changes have a rollback plan, but the operations team argues that some changes, such as database schema migrations, are difficult to roll back. What is the best approach to handle this situation?

Allow the operations team to decide on a case-by-case basis whether a rollback plan is needed.

Exempt database schema migrations from the rollback plan requirement because they are too complex.

Require a rollback plan for all changes, but allow the plan to include forward-fix procedures for changes that are difficult to reverse.

Require a full database restore as the rollback plan for all schema migrations.

A network administrator is preparing to implement a change that will replace the organization's firewall with a new model. The change management policy requires that all changes include a rollback plan. What is the primary purpose of including a rollback plan in the change request?

To satisfy the vendor's warranty requirements for the new firewall hardware.

To document the steps for implementing the new firewall in case the original implementation fails.

To ensure that the change is reversible without requiring any additional approvals.

To provide a documented procedure to restore the previous configuration if the change fails or causes unexpected issues.

A mid-sized company has a DR budget that cannot support a fully mirrored hot site. The company can tolerate up to 24 hours of downtime and up to 4 hours of data loss. Which DR strategy is most appropriate?

Backup tapes stored offsite with no standby site

Hot site with synchronous replication

What is the purpose of a rollback plan in change management documentation?

To list all the stakeholders who need to approve the change

To record the results of the post-implementation review

To document the business case for the change

To describe the steps to reverse a change if it fails or causes issues

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 4

Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 6)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

11concepts

Questions 26–30

26expert · medium
An organization is implementing a new change management process. The CISO wants to ensure that all changes have a rollback plan, but the operations team argues that some changes, such as database schema migrations, are difficult to roll back. What is the best approach to handle this situation?
Select an answer first
27application · medium
A network administrator is preparing to implement a change that will replace the organization's firewall with a new model. The change management policy requires that all changes include a rollback plan. What is the primary purpose of including a rollback plan in the change request?
Select an answer first
28application · medium
A mid-sized company has a DR budget that cannot support a fully mirrored hot site. The company can tolerate up to 24 hours of downtime and up to 4 hours of data loss. Which DR strategy is most appropriate?
Select an answer first
29foundation · easy
Which disaster recovery strategy is the least expensive to maintain but has the longest recovery time?
Select an answer first
30foundation · easy
What is the purpose of a rollback plan in change management documentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.