A critical security patch must be applied to a production server immediately to address a known vulnerability. The change manager is concerned about the risk of the patch causing downtime. What is the most appropriate approach?

Apply the patch and document the change after implementation.

Wait for the next scheduled maintenance window to apply the patch.

Apply the patch immediately without CAB approval, as it is a security emergency.

Use an emergency change process with a reduced CAB and a rollback plan.

What is the primary purpose of configuration management?

To manage user access permissions

To monitor network traffic for intrusions

To create backup copies of data

To maintain system integrity by identifying and controlling baselines

An organization is implementing a new configuration management process. The goal is to ensure that all systems are configured consistently and that changes are tracked. What is the first step in establishing this process?

Train all staff on the new configuration management policy.

Implement automated configuration scanning tools.

Conduct a risk assessment of all systems.

Identify and document the baseline configuration for each system.

A company is considering a change to its firewall rules to allow a new partner connection. The change request has been submitted, and the security team is conducting an impact analysis. They discover that the new rule would inadvertently allow traffic from the partner's network to reach a sensitive internal database. What is the most appropriate action?

Approve the change and rely on the database's internal access controls to protect the data.

Modify the change request to restrict the firewall rule to only the necessary ports and source IP addresses.

Reject the change and inform the partner that the connection cannot be established.

Approve the change and schedule a follow-up review in six months.

Systems Security Certified Practitioner

Domain 1Objective 6

1.6 - Support And/or Implement Change Management Lifecycle SSCP Practice Questions (Page 4)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

16%of the exam

Questions 16–20

16expert · hard
A critical security patch must be applied to a production server immediately to address a known vulnerability. The change manager is concerned about the risk of the patch causing downtime. What is the most appropriate approach?
Select an answer first
17foundation · easy
What is the primary purpose of configuration management?
Select an answer first
18application · medium
An organization is implementing a new configuration management process. The goal is to ensure that all systems are configured consistently and that changes are tracked. What is the first step in establishing this process?
Select an answer first
19foundation · easy
In a change management process, which role is responsible for formally submitting a request for a change and providing details about the desired outcome?
Select an answer first
20expert · hard
A company is considering a change to its firewall rules to allow a new partner connection. The change request has been submitted, and the security team is conducting an impact analysis. They discover that the new rule would inadvertently allow traffic from the partner's network to reach a sensitive internal database. What is the most appropriate action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

1.6 - Support And/or Implement Change Management Lifecycle SSCP Practice Questions (Page 4)

Questions 16–20

A critical security patch must be applied to a production server immediately to address a known vulnerability. The change manager is concerned about the risk of the patch causing downtime. What is the most appropriate approach?

What is the primary purpose of configuration management?

An organization is implementing a new configuration management process. The goal is to ensure that all systems are configured consistently and that changes are tracked. What is the first step in establishing this process?

In a change management process, which role is responsible for formally submitting a request for a change and providing details about the desired outcome?

Keep studying — Security Concepts and Practices