What is the purpose of a security impact analysis before implementing a configuration change?

To document the change after implementation

To determine if the change could introduce vulnerabilities

To replace the need for change approval

What is the primary purpose of configuration management oversight in a system life cycle?

To eliminate the need for security testing

To speed up the deployment of new features

To ensure security configurations are documented and controlled

A defense contractor is about to begin development of a new embedded system for a military platform. The program manager wants to ensure security is considered from the start, not bolted on after deployment. Which action best aligns with integrating security into the earliest phase of the system life cycle?

Perform a penetration test on the final prototype just before production release

Purchase a commercial off-the-shelf (COTS) security product to embed in the design

Develop a security patch plan to be executed after deployment

Conduct a security requirements elicitation workshop with stakeholders before design begins

Information Systems Security Management Professional

Domain 2Objective 1

2.1 Manage Integration of Security Throughout System Life Cycle ISSMP Practice Questions (Page 5)

Part of the Systems Lifecycle Management domain, which accounts for 15% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

6concepts

15%of the exam

Questions 21–25

21foundation · easy
What is the purpose of a security impact analysis before implementing a configuration change?
Select an answer first
22foundation · easy
During the implementation phase, which security control is most directly applied to protect a system from unauthorized access?
Select an answer first
23foundation · easy
What is the primary purpose of configuration management oversight in a system life cycle?
Select an answer first
24application · medium
A defense contractor is about to begin development of a new embedded system for a military platform. The program manager wants to ensure security is considered from the start, not bolted on after deployment. Which action best aligns with integrating security into the earliest phase of the system life cycle?
Select an answer first
25foundation · easy
Which security control is most relevant during the disposal phase of a system life cycle?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

2.1 Manage Integration of Security Throughout System Life Cycle ISSMP Practice Questions (Page 5)

Questions 21–25

What is the purpose of a security impact analysis before implementing a configuration change?

During the implementation phase, which security control is most directly applied to protect a system from unauthorized access?

What is the primary purpose of configuration management oversight in a system life cycle?

Which security control is most relevant during the disposal phase of a system life cycle?

Keep studying — Systems Lifecycle Management