ISC Secure Operations Change Management And Disposal — All Questions With Answers

Question 1mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

In a Kubernetes environment, you are updating a security sidecar container. Which deployment strategy ensures zero downtime while maintaining security posture?

Question 2mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are decommissioning an AWS EBS volume containing sensitive data. To comply with NIST SP 800-88, which action is required after logical deletion?

Question 3hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are managing a change request in ServiceNow. To ensure compliance with the RFC process for a security patch, which state transition is mandatory before implementation?

Question 4hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are managing the lifecycle of an enterprise-level cryptographic key. What is the most critical step prior to key decommissioning?

Question 5mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are performing a 'Sanitization' of a drive according to NIST 800-88. If the drive is 'Clear' status, what does this imply?

Question 6hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which THREE technologies are acceptable for the secure disposal of solid-state drives (SSDs)?

Question 7mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is reviewing the change management process for a cloud-hosted application. The process must ensure that changes to security groups are authorized and logged. Which control is most effective for detecting unauthorized changes to security groups?

Question 8hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE for a defense contractor that must dispose of a failed solid-state drive (SSD) containing controlled unclassified information (CUI). The drive is not functional and cannot be powered on, so software sanitization is impossible. Per NIST SP 800-88 Rev. 1 and ISSEP secure disposal guidance, which TWO actions are appropriate to achieve media sanitization before physical destruction? (Choose two.)

Question 9hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is updating the change management procedure for a cloud-based SaaS application that handles protected health information (PHI) under HIPAA. The procedure must ensure that changes to the application are properly authorized, tested, and documented. Which two controls are MOST critical to include in the procedure? (Choose two.)

Question 10easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is updating the change management policy for an organization that follows ITIL. The policy must define the role responsible for authorizing a change that affects multiple critical systems. According to ITIL, which role has the authority to approve such a change?

Question 11mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A defense contractor must dispose of a retired file server that processed Controlled Unclassified Information (CUI). The organization follows NIST SP 800-88 Rev. 1 and needs to verify that the storage media is sanitized to the Purge level before it leaves the secure facility. The server contains a hardware RAID controller with three magnetic hard disk drives (HDDs) and one solid-state drive (SSD) used as a cache. Which action correctly applies the required sanitization technique to ALL media in this server?

Question 12easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

An administrator needs to wipe a decommissioned laptop hard drive. Which method meets the NIST 800-88 'Purge' standard for magnetic media?

Question 13hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are utilizing Terraform to manage infrastructure as code. To ensure security-critical changes are not committed to production without authorization, which feature should you implement?

Question 14mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are configuring a CI/CD pipeline in GitLab to ensure security-critical changes are verified. Which mechanism ensures that only authorized engineers can merge changes to the master branch?

Question 15easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

What is the first step when preparing a system for secure disposal?

Question 16mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

When conducting a security impact analysis for a system change in a Federal environment, what is the primary purpose of reviewing the FIPS 199 categorization?

Question 17mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are reviewing a Change Management plan for an ICS (Industrial Control System). What is the most critical risk during the 'Implement' phase?

Question 18hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

When disposing of SSDs that contain PII, why is traditional degaussing ineffective?

Question 19mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

Which command line utility is used on Linux to verify the integrity of binary files during a maintenance patch update?

Question 20easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

What is the primary function of a Change Advisory Board (CAB) in an ITIL-based environment?

Question 21mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

When managing decommissioning of a cloud-native application, which document must be updated to reflect the removal of security controls?

Question 22easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

Which type of change is typically excluded from a formal Change Advisory Board review process?

Question 23hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are configuring a secure baseline for a server migration. Which NIST SP 800-53 control category covers 'System and Services Acquisition' regarding the maintenance of security-critical configurations?

Question 24hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

When managing a security-sensitive change in a regulated environment, why is 'Separation of Duties' applied to the 'Build' and 'Deploy' roles?

Question 25mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A legacy database must be decommissioned. You need to ensure the data is retrievable for 7 years for regulatory compliance. Which strategy is most secure?

Question 26mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which TWO actions should be included in a secure decommissioning process for a physical server?

Question 27easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

Which document outlines the specific security steps to be taken when a workstation reaches its end-of-life?

Question 28mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which TWO factors must be assessed when determining if a change is 'Emergency' versus 'Standard'?

Question 29hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which THREE items should be included in a Post-Implementation Review (PIR) for a security change?

Question 30mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which TWO criteria are used to determine if a change request must be reviewed by the Change Advisory Board (CAB)?

Question 31mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which THREE elements are essential in a Change Management policy?

Question 32hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which THREE strategies are used to mitigate risk during a production software change?

Question 33mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which TWO aspects of a system's lifecycle must be documented in the decommission plan?

Question 34mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A defense contractor is preparing to decommission a classified file server that used self-encrypting drives (SEDs). The drives must be reused in a lower-classification environment. Which action satisfies the media sanitization requirements while preserving the drives' usability?

Question 35easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is drafting a change management procedure for a financial institution's production environment. The procedure must ensure that changes are approved before implementation and that emergency changes are handled without bypassing security controls. Which element is essential to include in the procedure?

Question 36hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A government agency is decommissioning a legacy mainframe that processes sensitive but unclassified data. The agency must ensure that all data is irretrievably destroyed and that the destruction is verifiable for audit purposes. Which disposal method best meets these requirements?

Question 37mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE responsible for a change to an accredited system that will replace the cryptographic module used for data-at-rest encryption. The system is in the Operations phase and processes Controlled Unclassified Information. The change has been approved by the Configuration Control Board. Before implementation, which action BEST ensures the change does not invalidate the existing authorization?

Question 38hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are engineering the disposal process for a system that stores Top Secret information on magnetic tape. The tapes are at end-of-life and will be transported to an offsite facility for destruction. Which combination of activities BEST ensures the media cannot be reconstructed and that the disposal is auditable?

Question 39mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE for a system that processes Controlled Unclassified Information. An engineer submits a change request to upgrade the operating system, and the change will alter the cryptographic module boundary described in the system security plan. Before the change is approved, what must occur?

Question 40mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE for a system that has just been decommissioned. The system security plan included a contingency plan that referenced a failover site. Which action is MOST important to perform during the disposal phase to prevent unauthorized access to sensitive data that may remain at the failover site?

Question 41hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A defense contractor is decommissioning a system that processed classified information. The media sanitization records must demonstrate compliance with the Committee on National Security Systems policy for clearing, purging, and destroying media. Which action best satisfies the sanitization requirement for magnetic hard drives that will leave the controlled area?

Question 42hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is developing a media disposal plan for a data center that is being decommissioned. The plan must address the secure disposal of various media types, including hard disk drives (HDDs), solid-state drives (SSDs), and magnetic tapes. Which two actions should be included in the plan to ensure compliance with NIST SP 800-88 Rev. 1? (Choose two.)

Question 43mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are advising a program on the disposal of a system that processes Sensitive But Unclassified information. The system uses solid-state drives. The program wants to reuse the drives in a lower-security environment. Which sanitization method is MOST appropriate to allow reuse while ensuring the data cannot be recovered?

Question 44mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

An organization is retiring a legacy application that stores personal data. The decommissioning plan must address data retention, media sanitization, and the removal of the application from the authorization boundary. Which activity must be completed before the system is removed from the authorization boundary?

Question 45mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are an ISSE at a financial institution. A critical security patch for a web application firewall (WAF) must be deployed to production. The change management policy requires that a rollback plan be documented and tested. The WAF configuration is managed via infrastructure-as-code (IaC) in a Git repository. Which approach best satisfies the rollback requirement while maintaining security?

Question 46mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the security engineer for a federal agency that must follow NIST SP 800-53 configuration management controls. A system administrator submits an emergency change to modify a firewall rule to allow a new business partner's IP range. The change is implemented immediately and documented afterward. Which configuration management control requirement does this action violate?

Question 47hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE reviewing a change management process for a system that supports a continuous authorization approach. The process must ensure that security-relevant changes are identified and handled appropriately. Which TWO activities are required to maintain the authorization when a security-relevant change occurs? (Choose two.)

Question 48easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are an ISSE for a healthcare provider. A legacy server that stored electronic protected health information (ePHI) is being decommissioned. The server's hard drives are encrypted with AES-256, and the encryption keys are managed by a hardware security module (HSM). The drives will be repurposed within the organization for non-sensitive data. According to NIST SP 800-88 Rev. 1, which sanitization method is most appropriate to render the ePHI unrecoverable while allowing drive reuse?

Question 49hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are designing the disposal process for a data center that hosts a multi-tenant cloud environment. The hardware includes NVMe SSDs and HDDs. Regulatory requirements mandate that data must be rendered unrecoverable even against laboratory attacks. Which combination of sanitization methods should you specify for the SSDs and HDDs respectively to meet the most stringent level?

Question 50mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A system is being disposed of, and the disposal plan includes sanitizing solid-state drives that contain sensitive but unclassified data. The drives will be reused within the same organization but in a different security domain with a lower sensitivity level. Which sanitization method is most appropriate?

Question 51mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A defense contractor maintains classified systems in a facility accredited under the NISP. A storage area network (SAN) array will be repurposed from a collateral Secret enclave to an unclassified R&D network. The ISSE must select the sanitization action that renders the array's magnetic disk media free of any residual data that could be recovered using laboratory techniques. Which action satisfies this requirement?

Question 52hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

An ISSE supports a continuous integration pipeline where developers commit infrastructure-as-code that provisions security groups and logging agents. A recent audit found that a developer merged a change disabling flow logs in production without any independent review. Which control directly addresses this gap while preserving the pipeline's automated deployment model?

Question 53mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A federal information system is being decommissioned. The ISSE must ensure that hardware containing controlled unclassified information is disposed of in a manner that satisfies both the agency's media protection policy and its contract with a cloud service provider that hosted backups. Which action best addresses the disposal obligation for the provider-held backups?

Question 54mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the security lead for a financial institution that is decommissioning a legacy server that processed credit card transactions. The server contains encrypted cardholder data. Legal requires that all data be irretrievably destroyed. The server has multiple hard drives that are still functional. Which disposal method best meets the requirement while also allowing for potential reuse of the drives?

Question 55hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

An ISSE is reviewing the change management process for a system that processes law enforcement sensitive data. A proposed emergency change will modify the audit logging configuration to reduce log volume during a peak period. The change must be implemented within four hours. Which action best preserves the security posture while meeting the timeline?

Question 56hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

You are developing a decommissioning plan for a system that processes sensitive data. The plan must address both data remanence and the removal of the system from the network. Which two actions are essential to include in the decommissioning plan to ensure secure disposal? (Choose two.)

Question 57mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

An ISSE is preparing a disposal plan for a system that has reached end of life. The system includes custom-developed software, commercial hardware, and interfaces to an external identity provider. Which TWO activities must be included in the disposal plan to address security and continuity obligations? (Choose two.)

Question 58hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A financial services firm runs a three-tier web application on-premises. The security team must apply an emergency patch to the TLS library on all web servers because of an actively exploited vulnerability. The change management policy requires an emergency change process, but the firm's regulator mandates that production changes be traceable and approved by someone other than the implementer. Which sequence best satisfies both the emergency response need and the regulatory requirement?

Question 59mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A healthcare provider is retiring an on-premises electronic health record (EHR) system that stored protected health information (PHI). The decommissioning plan includes data migration, media sanitization, and contract termination with the hardware maintenance vendor. The security engineer must ensure that residual PHI on the vendor's diagnostic laptops and spare parts inventory is addressed before the maintenance contract ends. Which action best closes this disposal gap?

Question 60hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

A government agency is decommissioning a legacy identity management system that issued smart card credentials. The system's hardware security modules (HSMs) contain root certificate authority (CA) private keys, and the directory database holds user attributes. The decommissioning team must decide how to handle the HSM keys and the directory data. Which two actions are required to properly dispose of the CA key material and user data while preserving the ability to validate previously issued credentials? (Choose two.)

Question 61easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A retail company is replacing its point-of-sale (POS) terminals with new models that support tokenization. The old terminals store encrypted card data locally and are leased from a payment processor. The security policy requires that all storage media be sanitized before leaving the company's control. Which action should the security engineer take before returning the leased terminals?

Question 1mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

In a Kubernetes environment, you are updating a security sidecar container. Which deployment strategy ensures zero downtime while maintaining security posture?

Question 2mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are decommissioning an AWS EBS volume containing sensitive data. To comply with NIST SP 800-88, which action is required after logical deletion?

Question 3hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are managing a change request in ServiceNow. To ensure compliance with the RFC process for a security patch, which state transition is mandatory before implementation?

Question 4hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are managing the lifecycle of an enterprise-level cryptographic key. What is the most critical step prior to key decommissioning?

Question 5mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are performing a 'Sanitization' of a drive according to NIST 800-88. If the drive is 'Clear' status, what does this imply?

Question 6hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which THREE technologies are acceptable for the secure disposal of solid-state drives (SSDs)?

Question 7mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is reviewing the change management process for a cloud-hosted application. The process must ensure that changes to security groups are authorized and logged. Which control is most effective for detecting unauthorized changes to security groups?

Question 8hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE for a defense contractor that must dispose of a failed solid-state drive (SSD) containing controlled unclassified information (CUI). The drive is not functional and cannot be powered on, so software sanitization is impossible. Per NIST SP 800-88 Rev. 1 and ISSEP secure disposal guidance, which TWO actions are appropriate to achieve media sanitization before physical destruction? (Choose two.)

Question 9hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is updating the change management procedure for a cloud-based SaaS application that handles protected health information (PHI) under HIPAA. The procedure must ensure that changes to the application are properly authorized, tested, and documented. Which two controls are MOST critical to include in the procedure? (Choose two.)

Question 10easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is updating the change management policy for an organization that follows ITIL. The policy must define the role responsible for authorizing a change that affects multiple critical systems. According to ITIL, which role has the authority to approve such a change?

Question 11mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A defense contractor must dispose of a retired file server that processed Controlled Unclassified Information (CUI). The organization follows NIST SP 800-88 Rev. 1 and needs to verify that the storage media is sanitized to the Purge level before it leaves the secure facility. The server contains a hardware RAID controller with three magnetic hard disk drives (HDDs) and one solid-state drive (SSD) used as a cache. Which action correctly applies the required sanitization technique to ALL media in this server?

Question 12easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

An administrator needs to wipe a decommissioned laptop hard drive. Which method meets the NIST 800-88 'Purge' standard for magnetic media?

Question 13hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are utilizing Terraform to manage infrastructure as code. To ensure security-critical changes are not committed to production without authorization, which feature should you implement?

Question 14mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are configuring a CI/CD pipeline in GitLab to ensure security-critical changes are verified. Which mechanism ensures that only authorized engineers can merge changes to the master branch?

Question 15easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

What is the first step when preparing a system for secure disposal?

Question 16mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

When conducting a security impact analysis for a system change in a Federal environment, what is the primary purpose of reviewing the FIPS 199 categorization?

Question 17mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are reviewing a Change Management plan for an ICS (Industrial Control System). What is the most critical risk during the 'Implement' phase?

Question 18hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

When disposing of SSDs that contain PII, why is traditional degaussing ineffective?

Question 19mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

Which command line utility is used on Linux to verify the integrity of binary files during a maintenance patch update?

Question 20easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

What is the primary function of a Change Advisory Board (CAB) in an ITIL-based environment?

Question 21mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

When managing decommissioning of a cloud-native application, which document must be updated to reflect the removal of security controls?

Question 22easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

Which type of change is typically excluded from a formal Change Advisory Board review process?

Question 23hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are configuring a secure baseline for a server migration. Which NIST SP 800-53 control category covers 'System and Services Acquisition' regarding the maintenance of security-critical configurations?

Question 24hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

When managing a security-sensitive change in a regulated environment, why is 'Separation of Duties' applied to the 'Build' and 'Deploy' roles?

Question 25mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A legacy database must be decommissioned. You need to ensure the data is retrievable for 7 years for regulatory compliance. Which strategy is most secure?

Question 26mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which TWO actions should be included in a secure decommissioning process for a physical server?

Question 27easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

Which document outlines the specific security steps to be taken when a workstation reaches its end-of-life?

Question 28mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which TWO factors must be assessed when determining if a change is 'Emergency' versus 'Standard'?

Question 29hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which THREE items should be included in a Post-Implementation Review (PIR) for a security change?

Question 30mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which TWO criteria are used to determine if a change request must be reviewed by the Change Advisory Board (CAB)?

Question 31mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which THREE elements are essential in a Change Management policy?

Question 32hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which THREE strategies are used to mitigate risk during a production software change?

Question 33mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

Which TWO aspects of a system's lifecycle must be documented in the decommission plan?

Question 34mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A defense contractor is preparing to decommission a classified file server that used self-encrypting drives (SEDs). The drives must be reused in a lower-classification environment. Which action satisfies the media sanitization requirements while preserving the drives' usability?

Question 35easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is drafting a change management procedure for a financial institution's production environment. The procedure must ensure that changes are approved before implementation and that emergency changes are handled without bypassing security controls. Which element is essential to include in the procedure?

Question 36hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A government agency is decommissioning a legacy mainframe that processes sensitive but unclassified data. The agency must ensure that all data is irretrievably destroyed and that the destruction is verifiable for audit purposes. Which disposal method best meets these requirements?

Question 37mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE responsible for a change to an accredited system that will replace the cryptographic module used for data-at-rest encryption. The system is in the Operations phase and processes Controlled Unclassified Information. The change has been approved by the Configuration Control Board. Before implementation, which action BEST ensures the change does not invalidate the existing authorization?

Question 38hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are engineering the disposal process for a system that stores Top Secret information on magnetic tape. The tapes are at end-of-life and will be transported to an offsite facility for destruction. Which combination of activities BEST ensures the media cannot be reconstructed and that the disposal is auditable?

Question 39mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE for a system that processes Controlled Unclassified Information. An engineer submits a change request to upgrade the operating system, and the change will alter the cryptographic module boundary described in the system security plan. Before the change is approved, what must occur?

Question 40mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE for a system that has just been decommissioned. The system security plan included a contingency plan that referenced a failover site. Which action is MOST important to perform during the disposal phase to prevent unauthorized access to sensitive data that may remain at the failover site?

Question 41hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A defense contractor is decommissioning a system that processed classified information. The media sanitization records must demonstrate compliance with the Committee on National Security Systems policy for clearing, purging, and destroying media. Which action best satisfies the sanitization requirement for magnetic hard drives that will leave the controlled area?

Question 42hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

A security engineer is developing a media disposal plan for a data center that is being decommissioned. The plan must address the secure disposal of various media types, including hard disk drives (HDDs), solid-state drives (SSDs), and magnetic tapes. Which two actions should be included in the plan to ensure compliance with NIST SP 800-88 Rev. 1? (Choose two.)

Question 43mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are advising a program on the disposal of a system that processes Sensitive But Unclassified information. The system uses solid-state drives. The program wants to reuse the drives in a lower-security environment. Which sanitization method is MOST appropriate to allow reuse while ensuring the data cannot be recovered?

Question 44mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

An organization is retiring a legacy application that stores personal data. The decommissioning plan must address data retention, media sanitization, and the removal of the application from the authorization boundary. Which activity must be completed before the system is removed from the authorization boundary?

Question 45mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are an ISSE at a financial institution. A critical security patch for a web application firewall (WAF) must be deployed to production. The change management policy requires that a rollback plan be documented and tested. The WAF configuration is managed via infrastructure-as-code (IaC) in a Git repository. Which approach best satisfies the rollback requirement while maintaining security?

Question 46mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the security engineer for a federal agency that must follow NIST SP 800-53 configuration management controls. A system administrator submits an emergency change to modify a firewall rule to allow a new business partner's IP range. The change is implemented immediately and documented afterward. Which configuration management control requirement does this action violate?

Question 47hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

You are the ISSE reviewing a change management process for a system that supports a continuous authorization approach. The process must ensure that security-relevant changes are identified and handled appropriately. Which TWO activities are required to maintain the authorization when a security-relevant change occurs? (Choose two.)

Question 48easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are an ISSE for a healthcare provider. A legacy server that stored electronic protected health information (ePHI) is being decommissioned. The server's hard drives are encrypted with AES-256, and the encryption keys are managed by a hardware security module (HSM). The drives will be repurposed within the organization for non-sensitive data. According to NIST SP 800-88 Rev. 1, which sanitization method is most appropriate to render the ePHI unrecoverable while allowing drive reuse?

Question 49hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are designing the disposal process for a data center that hosts a multi-tenant cloud environment. The hardware includes NVMe SSDs and HDDs. Regulatory requirements mandate that data must be rendered unrecoverable even against laboratory attacks. Which combination of sanitization methods should you specify for the SSDs and HDDs respectively to meet the most stringent level?

Question 50mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A system is being disposed of, and the disposal plan includes sanitizing solid-state drives that contain sensitive but unclassified data. The drives will be reused within the same organization but in a different security domain with a lower sensitivity level. Which sanitization method is most appropriate?

Question 51mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A defense contractor maintains classified systems in a facility accredited under the NISP. A storage area network (SAN) array will be repurposed from a collateral Secret enclave to an unclassified R&D network. The ISSE must select the sanitization action that renders the array's magnetic disk media free of any residual data that could be recovered using laboratory techniques. Which action satisfies this requirement?

Question 52hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

An ISSE supports a continuous integration pipeline where developers commit infrastructure-as-code that provisions security groups and logging agents. A recent audit found that a developer merged a change disabling flow logs in production without any independent review. Which control directly addresses this gap while preserving the pipeline's automated deployment model?

Question 53mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A federal information system is being decommissioned. The ISSE must ensure that hardware containing controlled unclassified information is disposed of in a manner that satisfies both the agency's media protection policy and its contract with a cloud service provider that hosted backups. Which action best addresses the disposal obligation for the provider-held backups?

Question 54mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

You are the security lead for a financial institution that is decommissioning a legacy server that processed credit card transactions. The server contains encrypted cardholder data. Legal requires that all data be irretrievably destroyed. The server has multiple hard drives that are still functional. Which disposal method best meets the requirement while also allowing for potential reuse of the drives?

Question 55hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

An ISSE is reviewing the change management process for a system that processes law enforcement sensitive data. A proposed emergency change will modify the audit logging configuration to reduce log volume during a peak period. The change must be implemented within four hours. Which action best preserves the security posture while meeting the timeline?

Question 56hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

You are developing a decommissioning plan for a system that processes sensitive data. The plan must address both data remanence and the removal of the system from the network. Which two actions are essential to include in the decommissioning plan to ensure secure disposal? (Choose two.)

Question 57mediummulti select

Read the full Secure Operations Change Management And Disposal explanation →

An ISSE is preparing a disposal plan for a system that has reached end of life. The system includes custom-developed software, commercial hardware, and interfaces to an external identity provider. Which TWO activities must be included in the disposal plan to address security and continuity obligations? (Choose two.)

Question 58hardmultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A financial services firm runs a three-tier web application on-premises. The security team must apply an emergency patch to the TLS library on all web servers because of an actively exploited vulnerability. The change management policy requires an emergency change process, but the firm's regulator mandates that production changes be traceable and approved by someone other than the implementer. Which sequence best satisfies both the emergency response need and the regulatory requirement?

Question 59mediummultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A healthcare provider is retiring an on-premises electronic health record (EHR) system that stored protected health information (PHI). The decommissioning plan includes data migration, media sanitization, and contract termination with the hardware maintenance vendor. The security engineer must ensure that residual PHI on the vendor's diagnostic laptops and spare parts inventory is addressed before the maintenance contract ends. Which action best closes this disposal gap?

Question 60hardmulti select

Read the full Secure Operations Change Management And Disposal explanation →

A government agency is decommissioning a legacy identity management system that issued smart card credentials. The system's hardware security modules (HSMs) contain root certificate authority (CA) private keys, and the directory database holds user attributes. The decommissioning team must decide how to handle the HSM keys and the directory data. Which two actions are required to properly dispose of the CA key material and user data while preserving the ability to validate previously issued credentials? (Choose two.)

Question 61easymultiple choice

Read the full Secure Operations Change Management And Disposal explanation →

A retail company is replacing its point-of-sale (POS) terminals with new models that support tokenization. The old terminals store encrypted card data locally and are leased from a payment processor. The security policy requires that all storage media be sanitized before leaving the company's control. Which action should the security engineer take before returning the leased terminals?