A system administrator is planning to apply a critical security patch to a database server. The patch is known to cause issues with certain applications. The administrator has created a change request that includes the implementation plan and a rollback plan. What is the most important additional documentation to include in the change request?

The vendor's support contact information in case the patch causes issues.

The names of all database users who will be affected by the patch.

A detailed testing plan that includes validation of the patch in a non-production environment and a list of applications that may be affected.

The budget for the patch implementation.

What is a key characteristic of an emergency change?

It requires a full CAB meeting before implementation

It is pre-approved and requires no documentation

It is implemented immediately to address a critical issue, with approval obtained after the fact

It is a low-risk change that follows a standard procedure

In a change management process, what typically occurs during the post-implementation review?

The success of the change is evaluated and any issues are identified

The change is approved for implementation

The change request is formally submitted

The rollback plan is executed automatically

What is the primary role of a Change Advisory Board (CAB) in the change management process?

To monitor network traffic for security incidents

To implement approved changes in the production environment

To develop software patches for identified vulnerabilities

To evaluate and approve changes based on risk, impact, and business needs

Which of the following best describes the role of change management in an organization?

A policy that prohibits any changes to production systems

A set of procedures to ensure changes are evaluated, approved, implemented, and reviewed in a controlled manner

A process to approve all hardware purchases

A tool to automatically deploy software updates without human intervention

Certified Information Systems Security Professional

Domain 7Objective 9

7.9 - Understand and Participate in Change Management Processes CISSP Practice Questions (Page 2)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

13%of the exam

Questions 6–10

6expert · hard
A system administrator is planning to apply a critical security patch to a database server. The patch is known to cause issues with certain applications. The administrator has created a change request that includes the implementation plan and a rollback plan. What is the most important additional documentation to include in the change request?
Select an answer first
7foundation · easy
What is a key characteristic of an emergency change?
Select an answer first
8foundation · easy
In a change management process, what typically occurs during the post-implementation review?
Select an answer first
9foundation · easy
What is the primary role of a Change Advisory Board (CAB) in the change management process?
Select an answer first
10foundation · easy
Which of the following best describes the role of change management in an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.