Participate in Change Management ISSEP Practice Questions (Page 4)

Questions 16–19

1. 16application · medium

   A proposed change to the firewall rules will allow outbound HTTPS traffic from a specific subnet to a new cloud service. During the change review, the security team identifies that this subnet also hosts a legacy application that is not patched and is known to be vulnerable to command injection. What is the most critical additional impact to assess?

   • AThe need to update the firewall rule documentation.
   • BThe performance impact on the firewall due to increased traffic.
   • CThe cost of the new cloud service subscription.
   • DThe potential for the legacy application to be exploited to exfiltrate data via the new outbound path.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is it important to identify dependencies and affected components during a change impact assessment?

   • ATo assign a change number for tracking
   • BTo ensure the change does not inadvertently disrupt other systems or services
   • CTo determine the cost of the change
   • DTo satisfy regulatory requirements for change documentation
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A proposed change will move a critical database from an on-premises data center to a cloud provider. The change review must consider the impact on data residency requirements. Which of the following is the most important factor to assess?

   • AThe need to update the risk assessment documentation after the move.
   • BThe cloud provider's ability to store data in a specific geographic region that meets regulatory requirements.
   • CThe performance of the cloud provider's network.
   • DThe cost of the cloud service compared to on-premises hosting.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   After implementing a change to the database connection pooling settings, the operations team reports that the application is now experiencing intermittent timeouts. The change was approved and deployed, but the verification step was skipped due to time pressure. What is the most appropriate immediate action?

   • AIgnore the timeouts because they are likely unrelated to the change.
   • BRoll back the change immediately to restore service.
   • CPerform verification and validation of the change to confirm whether it is the cause of the timeouts.
   • DIncrease the connection pool size to resolve the timeouts.
   Reveal Solution Discussion Select an answer first