7.9 - Understand and Participate in Change Management Processes CISSP Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A multinational corporation is planning to migrate its customer data to a cloud provider that has data centers in multiple countries. The company must comply with data residency regulations that require customer data to remain within a specific country. The change request has been submitted to the CAB. What is the most important security consideration the CAB must evaluate?

   • AThe number of employees who will need access to the cloud environment.
   • BThe speed of the cloud provider's network compared to the current on-premises network.
   • CThe ability of the cloud provider to store data in the required country and comply with data residency regulations.
   • DThe cost of the cloud migration compared to on-premises hosting.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A network administrator is implementing a new firewall rule to block traffic from a specific IP range. The change has been approved and implemented. After a few hours, the help desk receives reports that legitimate users are unable to access a critical application. What is the most appropriate action for the administrator to take?

   • ADelete the firewall rule entirely and do not re-add it.
   • BExecute the rollback plan to revert the firewall rule change.
   • CWait to see if the issue resolves itself.
   • DModify the firewall rule to allow the affected users, but do not document the change.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is planning to implement a new remote access solution that will allow employees to work from home. The solution will use a VPN and multi-factor authentication. The change request has been submitted to the CAB. The CAB is concerned about the security impact of allowing remote access. What is the most important factor the CAB should consider when evaluating the change?

   • AThe number of employees who will use the remote access solution.
   • BThe cost of the VPN solution compared to other remote access options.
   • CThe potential for the remote access solution to introduce new attack vectors, such as unpatched VPN vulnerabilities or weak authentication.
   • DThe ease of use of the VPN solution for employees.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of validating a change after implementation?

   • ATo notify stakeholders of the change
   • BTo assign a change number for tracking
   • CTo confirm that the change works as intended and does not introduce new issues
   • DTo update the change management policy
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a key component of a rollback plan?

   • AA detailed description of the change's business benefits
   • BThe approval signatures of the CAB
   • CSpecific steps to restore the previous configuration
   • DA list of all users who will be affected
   Reveal Solution Discussion Select an answer first