mediumMultiple ChoiceObjective-mapped
CCSP Practice Question: Has implemented a change management process for…
An organization has implemented a change management process for its cloud infrastructure. During a routine change, a network security group rule is modified incorrectly, causing a critical application to become inaccessible. What is the most effective way to prevent this issue in future changes?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Integrate automated configuration validation tests into the change pipeline.
Automated configuration validation tests catch misconfigurations before deployment, preventing issues like the incorrect network security group rule. Option A is wrong because requiring manager approval does not prevent technical errors. Option C is wrong because rollback plans are reactive, not preventive. Option D is wrong because while peer review helps, it is manual and can miss errors, whereas automated tests are more reliable.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Require all changes to be approved by two managers.
Why it's wrong here
Approval processes address authorization but not technical correctness.
- ✓
Integrate automated configuration validation tests into the change pipeline.
Why this is correct
Automated testing can detect policy violations and misconfigurations before deployment.
- ✗
Ensure every change has a rollback plan.
Why it's wrong here
Rollback plans are important but do not prevent the error from occurring.
- ✗
Implement a peer review process for all change requests.
Why it's wrong here
Peer review can catch errors but is not as reliable as automated testing.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.