When should a security impact analysis be performed for a configuration change?

Only when a security incident occurs

After the change is implemented

Before the change is implemented

An organization has a change management policy that requires all changes to be approved by the change advisory board (CAB). A critical security patch must be applied immediately to address an active vulnerability. What is the best course of action?

Apply the patch and do not document it to avoid scrutiny

Do not apply the patch because it was not approved

Wait for the next CAB meeting to approve the patch

Apply the patch immediately and inform the CAB after the fact

Information Systems Security Management Professional

Domain 2Objective 1

2.1 Manage Integration of Security Throughout System Life Cycle ISSMP Practice Questions (Page 7)

Part of the Systems Lifecycle Management domain, which accounts for 15% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

6concepts

15%of the exam

Questions 31–32

31foundation · easy
When should a security impact analysis be performed for a configuration change?
Select an answer first
32application · medium
An organization has a change management policy that requires all changes to be approved by the change advisory board (CAB). A critical security patch must be applied immediately to address an active vulnerability. What is the best course of action?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

2.1 Manage Integration of Security Throughout System Life Cycle ISSMP Practice Questions (Page 7)

Questions 31–32

When should a security impact analysis be performed for a configuration change?

An organization has a change management policy that requires all changes to be approved by the change advisory board (CAB). A critical security patch must be applied immediately to address an active vulnerability. What is the best course of action?

Keep studying — Systems Lifecycle Management