What is the primary purpose of a formal change management process in an organization?

To ensure that all changes are implemented as quickly as possible to minimize downtime

To document every minor configuration detail for audit purposes only

To maintain the security, stability, and integrity of systems by controlling and reviewing modifications

To eliminate the need for incident management by preventing all system errors

What is the purpose of a rollback or backout procedure in change management?

To speed up the implementation of the change

To document the change for audit purposes

To revert a system to its previous state if the change causes problems

A company is planning to upgrade its core banking system. The change is critical and has a high risk of failure. The CAB has approved the change, but the implementation team is concerned about the rollback plan. What is the most important component of a rollback plan for this high-risk change?

A list of all users who will be affected by the change.

A backup of the new system configuration, not the old one.

A promise from the vendor that the new system will not fail.

A detailed step-by-step procedure to revert the system to its previous state, including data restoration and reconfiguration steps.

A company is planning to update its firewall rules to allow a new business application to communicate with an external partner. The change has been approved by the CAB. Before implementing the change in production, what is the most important step to take?

Document the change in the change log but do not test it because the CAB already approved it.

Implement the change immediately to avoid delaying the business application.

Notify all users that the firewall will be updated and that they may experience connectivity issues.

Test the new firewall rules in a non-production environment to ensure they work as expected and do not introduce security vulnerabilities.

Certified Information Systems Security Professional

Domain 7Objective 9

7.9 - Understand and Participate in Change Management Processes CISSP Practice Questions (Page 6)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

13%of the exam

Questions 26–30

26foundation · easy
Which of the following individuals would most likely be a member of a Change Advisory Board (CAB)?
Select an answer first
27foundation · easy
What is the primary purpose of a formal change management process in an organization?
Select an answer first
28foundation · easy
What is the purpose of a rollback or backout procedure in change management?
Select an answer first
29expert · hard
A company is planning to upgrade its core banking system. The change is critical and has a high risk of failure. The CAB has approved the change, but the implementation team is concerned about the rollback plan. What is the most important component of a rollback plan for this high-risk change?
Select an answer first
30application · medium
A company is planning to update its firewall rules to allow a new business application to communicate with an external partner. The change has been approved by the CAB. Before implementing the change in production, what is the most important step to take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.