Secure Operations Change Management And Disposal

A security engineer is drafting a change management procedure for a financial institution's production environment. The procedure must ensure that changes are approved before implementation and that emergency changes are handled without bypassing security controls. Which element is essential to include in the procedure?

You are advising a program on the disposal of a system that processes Sensitive But Unclassified information. The system uses solid-state drives. The program wants to reuse the drives in a lower-security environment. Which sanitization method is MOST appropriate to allow reuse while ensuring the data cannot be recovered?

You are the ISSE for a system that has just been decommissioned. The system security plan included a contingency plan that referenced a failover site. Which action is MOST important to perform during the disposal phase to prevent unauthorized access to sensitive data that may remain at the failover site?

A federal information system is being decommissioned. The ISSE must ensure that hardware containing controlled unclassified information is disposed of in a manner that satisfies both the agency's media protection policy and its contract with a cloud service provider that hosted backups. Which action best addresses the disposal obligation for the provider-held backups?

Which THREE elements are essential in a Change Management policy?

A government agency is decommissioning a legacy mainframe that processes sensitive but unclassified data. The agency must ensure that all data is irretrievably destroyed and that the destruction is verifiable for audit purposes. Which disposal method best meets these requirements?

Which THREE strategies are used to mitigate risk during a production software change?

You are the security engineer for a federal agency that must follow NIST SP 800-53 configuration management controls. A system administrator submits an emergency change to modify a firewall rule to allow a new business partner's IP range. The change is implemented immediately and documented afterward. Which configuration management control requirement does this action violate?

When conducting a security impact analysis for a system change in a Federal environment, what is the primary purpose of reviewing the FIPS 199 categorization?

Which TWO actions should be included in a secure decommissioning process for a physical server?

A healthcare provider is retiring an on-premises electronic health record (EHR) system that stored protected health information (PHI). The decommissioning plan includes data migration, media sanitization, and contract termination with the hardware maintenance vendor. The security engineer must ensure that residual PHI on the vendor's diagnostic laptops and spare parts inventory is addressed before the maintenance contract ends. Which action best closes this disposal gap?

Which TWO criteria are used to determine if a change request must be reviewed by the Change Advisory Board (CAB)?

Which document outlines the specific security steps to be taken when a workstation reaches its end-of-life?

Which command line utility is used on Linux to verify the integrity of binary files during a maintenance patch update?

A security engineer is developing a media disposal plan for a data center that is being decommissioned. The plan must address the secure disposal of various media types, including hard disk drives (HDDs), solid-state drives (SSDs), and magnetic tapes. Which two actions should be included in the plan to ensure compliance with NIST SP 800-88 Rev. 1? (Choose two.)

You are utilizing Terraform to manage infrastructure as code. To ensure security-critical changes are not committed to production without authorization, which feature should you implement?

An ISSE supports a continuous integration pipeline where developers commit infrastructure-as-code that provisions security groups and logging agents. A recent audit found that a developer merged a change disabling flow logs in production without any independent review. Which control directly addresses this gap while preserving the pipeline's automated deployment model?

A defense contractor is preparing to decommission a classified file server that used self-encrypting drives (SEDs). The drives must be reused in a lower-classification environment. Which action satisfies the media sanitization requirements while preserving the drives' usability?

A defense contractor maintains classified systems in a facility accredited under the NISP. A storage area network (SAN) array will be repurposed from a collateral Secret enclave to an unclassified R&D network. The ISSE must select the sanitization action that renders the array's magnetic disk media free of any residual data that could be recovered using laboratory techniques. Which action satisfies this requirement?

What is the primary function of a Change Advisory Board (CAB) in an ITIL-based environment?

What is the first step when preparing a system for secure disposal?

A system is being disposed of, and the disposal plan includes sanitizing solid-state drives that contain sensitive but unclassified data. The drives will be reused within the same organization but in a different security domain with a lower sensitivity level. Which sanitization method is most appropriate?

A defense contractor is decommissioning a system that processed classified information. The media sanitization records must demonstrate compliance with the Committee on National Security Systems policy for clearing, purging, and destroying media. Which action best satisfies the sanitization requirement for magnetic hard drives that will leave the controlled area?

You are an ISSE for a healthcare provider. A legacy server that stored electronic protected health information (ePHI) is being decommissioned. The server's hard drives are encrypted with AES-256, and the encryption keys are managed by a hardware security module (HSM). The drives will be repurposed within the organization for non-sensitive data. According to NIST SP 800-88 Rev. 1, which sanitization method is most appropriate to render the ePHI unrecoverable while allowing drive reuse?

You are reviewing a Change Management plan for an ICS (Industrial Control System). What is the most critical risk during the 'Implement' phase?

A retail company is replacing its point-of-sale (POS) terminals with new models that support tokenization. The old terminals store encrypted card data locally and are leased from a payment processor. The security policy requires that all storage media be sanitized before leaving the company's control. Which action should the security engineer take before returning the leased terminals?

You are the security lead for a financial institution that is decommissioning a legacy server that processed credit card transactions. The server contains encrypted cardholder data. Legal requires that all data be irretrievably destroyed. The server has multiple hard drives that are still functional. Which disposal method best meets the requirement while also allowing for potential reuse of the drives?

An administrator needs to wipe a decommissioned laptop hard drive. Which method meets the NIST 800-88 'Purge' standard for magnetic media?

You are the ISSE for a system that processes Controlled Unclassified Information. An engineer submits a change request to upgrade the operating system, and the change will alter the cryptographic module boundary described in the system security plan. Before the change is approved, what must occur?

You are an ISSE at a financial institution. A critical security patch for a web application firewall (WAF) must be deployed to production. The change management policy requires that a rollback plan be documented and tested. The WAF configuration is managed via infrastructure-as-code (IaC) in a Git repository. Which approach best satisfies the rollback requirement while maintaining security?

Which TWO factors must be assessed when determining if a change is 'Emergency' versus 'Standard'?

A financial services firm runs a three-tier web application on-premises. The security team must apply an emergency patch to the TLS library on all web servers because of an actively exploited vulnerability. The change management policy requires an emergency change process, but the firm's regulator mandates that production changes be traceable and approved by someone other than the implementer. Which sequence best satisfies both the emergency response need and the regulatory requirement?

You are the ISSE responsible for a change to an accredited system that will replace the cryptographic module used for data-at-rest encryption. The system is in the Operations phase and processes Controlled Unclassified Information. The change has been approved by the Configuration Control Board. Before implementation, which action BEST ensures the change does not invalidate the existing authorization?

You are engineering the disposal process for a system that stores Top Secret information on magnetic tape. The tapes are at end-of-life and will be transported to an offsite facility for destruction. Which combination of activities BEST ensures the media cannot be reconstructed and that the disposal is auditable?

Which type of change is typically excluded from a formal Change Advisory Board review process?

An ISSE is reviewing the change management process for a system that processes law enforcement sensitive data. A proposed emergency change will modify the audit logging configuration to reduce log volume during a peak period. The change must be implemented within four hours. Which action best preserves the security posture while meeting the timeline?

When managing a security-sensitive change in a regulated environment, why is 'Separation of Duties' applied to the 'Build' and 'Deploy' roles?

You are developing a decommissioning plan for a system that processes sensitive data. The plan must address both data remanence and the removal of the system from the network. Which two actions are essential to include in the decommissioning plan to ensure secure disposal? (Choose two.)

When managing decommissioning of a cloud-native application, which document must be updated to reflect the removal of security controls?

A legacy database must be decommissioned. You need to ensure the data is retrievable for 7 years for regulatory compliance. Which strategy is most secure?

A government agency is decommissioning a legacy identity management system that issued smart card credentials. The system's hardware security modules (HSMs) contain root certificate authority (CA) private keys, and the directory database holds user attributes. The decommissioning team must decide how to handle the HSM keys and the directory data. Which two actions are required to properly dispose of the CA key material and user data while preserving the ability to validate previously issued credentials? (Choose two.)

You are configuring a CI/CD pipeline in GitLab to ensure security-critical changes are verified. Which mechanism ensures that only authorized engineers can merge changes to the master branch?

An organization is retiring a legacy application that stores personal data. The decommissioning plan must address data retention, media sanitization, and the removal of the application from the authorization boundary. Which activity must be completed before the system is removed from the authorization boundary?

You are configuring a secure baseline for a server migration. Which NIST SP 800-53 control category covers 'System and Services Acquisition' regarding the maintenance of security-critical configurations?

You are the ISSE reviewing a change management process for a system that supports a continuous authorization approach. The process must ensure that security-relevant changes are identified and handled appropriately. Which TWO activities are required to maintain the authorization when a security-relevant change occurs? (Choose two.)

Which THREE items should be included in a Post-Implementation Review (PIR) for a security change?

You are designing the disposal process for a data center that hosts a multi-tenant cloud environment. The hardware includes NVMe SSDs and HDDs. Regulatory requirements mandate that data must be rendered unrecoverable even against laboratory attacks. Which combination of sanitization methods should you specify for the SSDs and HDDs respectively to meet the most stringent level?

An ISSE is preparing a disposal plan for a system that has reached end of life. The system includes custom-developed software, commercial hardware, and interfaces to an external identity provider. Which TWO activities must be included in the disposal plan to address security and continuity obligations? (Choose two.)

Which TWO aspects of a system's lifecycle must be documented in the decommission plan?

When disposing of SSDs that contain PII, why is traditional degaussing ineffective?