A system has been authorized to operate for one year. During the authorization period, the system undergoes a major upgrade that significantly changes its functionality. The system owner is unsure whether the change requires a new authorization. What should the system owner do?

Notify the authorizing official but continue operating without a new decision.

Wait until the next annual assessment to address the upgrade.

Assume the existing authorization covers the upgrade and proceed.

Conduct a security assessment and request a new authorization decision.

Certified Secure Software Lifecycle Professional

Domain 2Objective 9

Implement Secure Operation Practices CSSLP Practice Questions (Page 6)

Part of the Secure Software Lifecycle Management domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

4concepts

11%of the exam

Questions 26–26

26expert · hard
A system has been authorized to operate for one year. During the authorization period, the system undergoes a major upgrade that significantly changes its functionality. The system owner is unsure whether the change requires a new authorization. What should the system owner do?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Implement Secure Operation Practices CSSLP Practice Questions (Page 6)

Questions 26–26

A system has been authorized to operate for one year. During the authorization period, the system undergoes a major upgrade that significantly changes its functionality. The system owner is unsure whether the change requires a new authorization. What should the system owner do?

Keep studying — Secure Software Lifecycle Management