An organization wants to ensure that all servers are configured to a secure baseline. They plan to use configuration management to enforce this. What is the most effective way to implement this?

Use a configuration management tool to define and enforce the baseline automatically.

Conduct regular audits to identify non-compliant servers.

Create a security policy and rely on administrators to follow it.

Manually configure each server and document the settings.

A change request has been submitted to update the authentication system. The change manager has assigned the request to a technical lead for assessment. What is the technical lead's primary responsibility during this phase?

Evaluate the technical feasibility and security impact of the change.

Implement the change immediately to minimize downtime.

Communicate the change to all end users.

Approve the change and schedule the implementation.

An organization is implementing a new configuration management process. They want to ensure that any changes to system configurations are tracked and approved. What is the most effective way to achieve this?

Require all configuration changes to go through the change management process.

Conduct quarterly audits of system configurations.

Allow administrators to make configuration changes freely and document them later.

Use automated tools to detect configuration changes and alert administrators.

An organization is reviewing its change management process to improve auditability. They find that some changes are implemented without a post-implementation review. What is the most significant risk of this gap?

The organization may not learn from mistakes or successes, leading to repeated issues.

The changes may not be documented in the CMDB.

The changes may not be approved by the CAB.

The changes may introduce security vulnerabilities.

Systems Security Certified Practitioner

Domain 1Objective 6

1.6 - Support And/or Implement Change Management Lifecycle SSCP Practice Questions (Page 3)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

16%of the exam

Questions 11–15

11foundation · easy
In a standard change management lifecycle, which step immediately follows the assessment of a change request?
Select an answer first
12application · medium
An organization wants to ensure that all servers are configured to a secure baseline. They plan to use configuration management to enforce this. What is the most effective way to implement this?
Select an answer first
13application · medium
A change request has been submitted to update the authentication system. The change manager has assigned the request to a technical lead for assessment. What is the technical lead's primary responsibility during this phase?
Select an answer first
14application · medium
An organization is implementing a new configuration management process. They want to ensure that any changes to system configurations are tracked and approved. What is the most effective way to achieve this?
Select an answer first
15expert · hard
An organization is reviewing its change management process to improve auditability. They find that some changes are implemented without a post-implementation review. What is the most significant risk of this gap?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.