7.9 - Understand and Participate in Change Management Processes CISSP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security analyst discovers that a critical vulnerability is being actively exploited in the organization's internet-facing web server. The vendor has released a patch, but applying it requires a service restart, which will cause a brief outage. The organization's change management policy requires all changes to go through the Change Advisory Board (CAB). What is the most appropriate course of action?

   • AWait for the next scheduled CAB meeting to approve the change.
   • BApply the patch without any documentation because it is an emergency.
   • CRequest a special CAB meeting, but do not apply the patch until approval is granted.
   • DApply the patch immediately and document it as an emergency change, then conduct a post-implementation review.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security operations center (SOC) detects a zero-day vulnerability being exploited in the organization's email gateway. The vendor has released an emergency patch, but the patch has not been fully tested. The change management policy requires all changes to be approved by the CAB. What is the most appropriate action for the SOC to take?

   • AApply the patch immediately as an emergency change, document it, and conduct a post-implementation review.
   • BWait for the CAB to meet and approve the patch before applying it.
   • CDo not apply the patch because it has not been tested, and instead implement workarounds.
   • DApply the patch only after testing it in a non-production environment, even if it takes several days.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Why is it important to document rollback procedures in a change request?

   • ATo provide a clear plan for reverting the change if issues arise
   • BTo satisfy regulatory requirements for all changes
   • CTo ensure the change is implemented faster
   • DTo avoid the need for post-implementation review
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A change request has been submitted to update the organization's backup software. The change manager has created a change request that includes the reason for the change, the implementation plan, and the rollback plan. What additional information is critical to include in the change request?

   • AThe personal contact information of the system administrator implementing the change.
   • BThe names of all employees who have access to the backup software.
   • CThe budget for the backup software license.
   • DThe risk assessment and security impact analysis of the change.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is planning to implement a new single sign-on (SSO) solution that will integrate with its existing Active Directory. The change manager has submitted a request to the Change Advisory Board (CAB). What is the most important security consideration the CAB should evaluate before approving the change?

   • AThe potential for the SSO solution to introduce new attack vectors or weaken authentication controls.
   • BThe cost of the SSO solution compared to the existing authentication method.
   • CThe compatibility of the SSO solution with the company's web browser.
   • DThe number of users who will be affected by the change.
   Reveal Solution Discussion Select an answer first