Question in Security & Risk Management domain.

[VT]

Which of the following best describes change management?

A. Preventing changes to systems

B. Ensuring only approved changes are implemented

C. Ensuring that changes do not reduce security

D. Auditing privilege access

[Rajan Gauchan]

for me 

B

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.
To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/1c2777ef-3b39-4acc-b90c-46327a37cf22%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Anil Kumar K]

These change mgmt questions are always differ, not sure we should look from security point or from mgmt approval point.

Its goal, purpose and best description kind of changes..

Get Outlook for iOS

---

From: cissp...@googlegroups.com <cissp...@googlegroups.com> on behalf of Rajan Gauchan <rajanga...@gmail.com>
Sent: Monday, August 13, 2018 3:36:50 AM
To: cissp...@googlegroups.com
Subject: Re: [CCCure_CISSP_Talks] Question in Security & Risk Management domain.

 

To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/CAHLhUha%3DQBRoQn_wRd6MB0VnP-jq3bSXjFbRAvsoKSiz2ZZ%2BHg%40mail.gmail.com.

[lead...@gmail.com]

B for me also. 

BR//

Josepha HODE.

To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/CY4PR03MB2421F14166D2E437D3FCDBBDAB390%40CY4PR03MB2421.namprd03.prod.outlook.com.

[Venky T]

Thank you for your reply. The correct answer is B (according to the question bank). But we make changes to ensure "that changes do not reduce security" (based on the provided answers) even though changes needed to approved first. 

Can someone provide some explanation pls ?

By the way, my apologies for delayed response. 

V.T

To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/D0E7602C-C1A6-4E26-BB26-0E13DAD92677%40gmail.com.

[CCCure Support]

Good day, Venky,

Changes requests must go through the CCB (Change Control Board).

On the board you have someone from Operations, someone from Network,
someone from the System team, someone from Finance/Management (the
bean counter, and of course someone from the security team.

Each of the members of the board has their own concerns about the
change that is proposed. Of course, you as the security person would
look at the impact of the change on security.

Remember you're looking for the best answer. Usually if one of the
answers includes another one, that higher level answer would be the
better choice.

Best regards

Clement

> To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/CAHHe5Jvt1Z%3DuXtPsZ7%2BERcVgO6cF10sg2mKLnCXWu3ScYR5oMw%40mail.gmail.com.

> For more options, visit https://groups.google.com/d/optout.



--

---------------------------------------------------------------------------------------------

Clement Dupuis, CD
CCCure Owner and Founder
Chief Learning Officer (CLO) and Security Evangelist
The CCCure Family of Portals
GCFW, GCIA, Security+ 301, CEH V7, CCSA, CCSE, + 12 others

For support or queries send an email to: Sup...@CCCure.Com

----------------------------------------------------------------------------------------------
Maintainer of :

The CCCure Learning Portal - Find the best Security Tutorials

The CCCure Quiz Engine

Knowledge sharing and giving back to the community

[Venky T]

Thanks for your feedback Clement. It was helpful.

-- V.T.

To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/CAA3tmKuqUn%3DdkDLH4Us%3Df8Ymn74MM1stjdLW%2Bo%3DVNPAkwNJxag%40mail.gmail.com.