A system administrator is preparing to deploy a new version of an internal application. The change request has been approved, and the implementation plan is ready. What documentation is essential to include in the change request to ensure a safe and reversible deployment?

The names of the developers who wrote the new code.

A list of all employees who will be affected by the change.

A detailed rollback plan that outlines steps to revert to the previous version if the deployment fails.

The budget allocated for the change implementation.

A project manager is overseeing the deployment of a new customer relationship management (CRM) system. The change request has been approved, and the implementation is scheduled for the upcoming weekend. What is the final step the project manager should take after the implementation is complete?

Immediately close the change request without any further action.

Delete all documentation related to the change to maintain data privacy.

Conduct a post-implementation review to evaluate the success of the change and identify lessons learned.

Notify the CAB that the change is complete, but do not provide any details.

What is the purpose of a security impact assessment in the change management process?

To assign a change manager to oversee the process

To determine the cost of the change

To evaluate the potential security risks and vulnerabilities introduced by the change

To schedule the implementation window

Why is it important to notify stakeholders about planned changes?

To obtain their approval for the change

To allow them to prepare for potential impacts and schedule their work accordingly

To ensure they do not access the system during the change

To satisfy regulatory requirements for all changes

Certified Information Systems Security Professional

Domain 7Objective 9

7.9 - Understand and Participate in Change Management Processes CISSP Practice Questions (Page 7)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

13%of the exam

Questions 31–35

31application · medium
A system administrator is preparing to deploy a new version of an internal application. The change request has been approved, and the implementation plan is ready. What documentation is essential to include in the change request to ensure a safe and reversible deployment?
Select an answer first
32application · medium
A project manager is overseeing the deployment of a new customer relationship management (CRM) system. The change request has been approved, and the implementation is scheduled for the upcoming weekend. What is the final step the project manager should take after the implementation is complete?
Select an answer first
33foundation · easy
Which document is essential for tracking a change from request through implementation and review?
Select an answer first
34foundation · easy
What is the purpose of a security impact assessment in the change management process?
Select an answer first
35foundation · easy
Why is it important to notify stakeholders about planned changes?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.