Secure Operations Change Management And Disposal

You are managing a change request in ServiceNow. To ensure compliance with the RFC process for a security patch, which state transition is mandatory before implementation?

In a Kubernetes environment, you are updating a security sidecar container. Which deployment strategy ensures zero downtime while maintaining security posture?

Which THREE elements are essential in a Change Management policy?

Which THREE strategies are used to mitigate risk during a production software change?

When conducting a security impact analysis for a system change in a Federal environment, what is the primary purpose of reviewing the FIPS 199 categorization?

Which TWO actions should be included in a secure decommissioning process for a physical server?

Which TWO criteria are used to determine if a change request must be reviewed by the Change Advisory Board (CAB)?

Which document outlines the specific security steps to be taken when a workstation reaches its end-of-life?

Which command line utility is used on Linux to verify the integrity of binary files during a maintenance patch update?

You are utilizing Terraform to manage infrastructure as code. To ensure security-critical changes are not committed to production without authorization, which feature should you implement?

You are performing a 'Sanitization' of a drive according to NIST 800-88. If the drive is 'Clear' status, what does this imply?

What is the primary function of a Change Advisory Board (CAB) in an ITIL-based environment?

What is the first step when preparing a system for secure disposal?

You are reviewing a Change Management plan for an ICS (Industrial Control System). What is the most critical risk during the 'Implement' phase?

An administrator needs to wipe a decommissioned laptop hard drive. Which method meets the NIST 800-88 'Purge' standard for magnetic media?

Which TWO factors must be assessed when determining if a change is 'Emergency' versus 'Standard'?

You are managing the lifecycle of an enterprise-level cryptographic key. What is the most critical step prior to key decommissioning?

Which type of change is typically excluded from a formal Change Advisory Board review process?

You are decommissioning an AWS EBS volume containing sensitive data. To comply with NIST SP 800-88, which action is required after logical deletion?

When managing a security-sensitive change in a regulated environment, why is 'Separation of Duties' applied to the 'Build' and 'Deploy' roles?

When managing decommissioning of a cloud-native application, which document must be updated to reflect the removal of security controls?

A legacy database must be decommissioned. You need to ensure the data is retrievable for 7 years for regulatory compliance. Which strategy is most secure?

You are configuring a CI/CD pipeline in GitLab to ensure security-critical changes are verified. Which mechanism ensures that only authorized engineers can merge changes to the master branch?

You are configuring a secure baseline for a server migration. Which NIST SP 800-53 control category covers 'System and Services Acquisition' regarding the maintenance of security-critical configurations?

Which THREE items should be included in a Post-Implementation Review (PIR) for a security change?

Which THREE technologies are acceptable for the secure disposal of solid-state drives (SSDs)?

Which TWO aspects of a system's lifecycle must be documented in the decommission plan?

When disposing of SSDs that contain PII, why is traditional degaussing ineffective?