7.9 - Understand and Participate in Change Management Processes CISSP Practice Questions (Page 8)

Questions 36–38

1. 36application · medium

   A financial services firm is planning to migrate its customer-facing web portal to a new cloud provider. The migration will occur over a weekend and involves significant architectural changes. The change manager has submitted a request to the Change Advisory Board (CAB). During the CAB meeting, several members raise concerns about the security implications and the lack of a detailed rollback plan. What is the most appropriate action for the CAB to take?

   • AApprove the change with a condition that a rollback plan be developed after implementation.
   • BApprove the change immediately because the migration is necessary for business growth.
   • CReject the change permanently and require the project to be cancelled.
   • DRequest additional information and defer the decision until the security impact assessment and rollback plan are provided.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What should be communicated to users after a change has been completed?

   • AThe detailed technical specifications of the change
   • BA summary of the change, its impact, and any new procedures or instructions
   • CThe names of the change approvers
   • DThe rollback plan in case of failure
   Reveal Solution Discussion Select an answer first
3. 38foundation · easy

   Why is it important to test changes in a controlled environment before deployment?

   • ATo speed up the approval process
   • BTo reduce the risk of introducing errors or security issues into the production environment
   • CTo eliminate the need for a post-implementation review
   • DTo satisfy user requirements for documentation
   Reveal Solution Discussion Select an answer first