Participate in Change Management ISSEP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A change to the authentication system was implemented to require multi-factor authentication (MFA) for all users. After implementation, the help desk receives numerous complaints that some users cannot log in. The change was verified in a pilot group, but not for all user types. What is the most appropriate next step?

   • ARoll back the MFA requirement for all users.
   • BDisable MFA for the affected users only.
   • CInvestigate the affected user groups and perform additional verification to identify the root cause.
   • DIgnore the complaints because MFA is a security best practice.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a change review, which role is typically responsible for presenting the technical details and security implications of a proposed change to the review board?

   • AThe change requester or system owner
   • BThe security auditor
   • CThe help desk technician
   • DThe end user of the system
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   After a change to the backup system, the verification step confirms that backups are being created successfully. However, a subsequent test restore fails. What is the most appropriate action?

   • AConsider the change successful because backups are created.
   • BUpdate the risk assessment to note that restores are not guaranteed.
   • CInvestigate the restore failure and perform additional verification to ensure backups are restorable.
   • DIgnore the restore failure because backups are working.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is deploying a new web application that will be accessible to customers. The change includes a new load balancer configuration and a new firewall rule. The change review board approved the change, and the deployment is complete. However, during verification, the security team finds that the new firewall rule is too permissive and allows traffic to an internal management port. The change review board must decide how to handle this issue. What is the most appropriate action?

   • ADocument the issue and fix it in the next change cycle.
   • BImmediately modify the firewall rule to restrict access to the management port.
   • CRoll back the entire change to the previous state.
   • DLeave the firewall rule as is because the change was approved.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A change to the network segmentation was approved and implemented, which now isolates the payment processing systems from the corporate network. After implementation, the risk assessment documentation still reflects the old architecture. What is the most appropriate action?

   • AUpdate the risk assessment documentation to reflect the reduced attack surface and any new residual risks.
   • BDelete the old risk assessment and create a new one from scratch.
   • CWait for the next scheduled risk assessment review to update the documentation.
   • DLeave the documentation unchanged because the change was approved.
   Reveal Solution Discussion Select an answer first