1.6 - Support And/or Implement Change Management Lifecycle SSCP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A proposed change would allow unauthorized users to view sensitive data. Which aspect of the CIA triad is most directly impacted?

   • AIntegrity
   • BNon-repudiation
   • CConfidentiality
   • DAvailability
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An organization is preparing for an external audit. The auditor requests evidence that all changes to the production environment were authorized and traceable. What should the change management team provide?

   • AA list of all change requests that were approved.
   • BA summary of the changes made in the last year.
   • CThe configuration management database (CMDB) entries for the affected systems.
   • DThe change management logs, including requests, approvals, implementation records, and post-implementation reviews.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   When assessing the security impact of a proposed change, which of the following is the primary focus?

   • AThe number of users affected by the change
   • BThe cost of implementing the change
   • CThe effect on confidentiality, integrity, and availability
   • DThe time required to complete the change
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is planning to upgrade its operating system on all workstations. The change has been approved, and the implementation is scheduled. The change manager is concerned about the impact on legacy applications. What is the most appropriate action?

   • AConduct a pilot test on a small group of workstations to identify and resolve compatibility issues.
   • BCancel the upgrade and keep the current operating system.
   • CProceed with the upgrade and address any application issues after implementation.
   • DUpgrade all workstations at once to minimize the time spent on the project.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial services firm is planning to deploy a new customer-facing web application. The change request has been submitted, and the change manager has scheduled an emergency CAB meeting because the deployment window is tight. During the meeting, the security team identifies that the application will store sensitive customer data in a new database that has not been reviewed. What is the change manager's most appropriate action?

   • AApprove the change but require the security team to implement compensating controls during deployment.
   • BDefer the change until the security impact analysis is completed and the database design is reviewed.
   • CApprove the change and note that the security review can be completed post-implementation.
   • DReject the change and require a new request to be submitted after the security review is completed.
   Reveal Solution Discussion Select an answer first