SSCP Security Operations and Administration Practice Question
During a post-implementation review of a change, it is discovered that the change introduced a configuration deviation from the baseline. The deviation was not detected during testing. What is the BEST way to prevent this in the future?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement automated configuration scanning in the staging environment
Configuration management includes automated scanning (e.g., SCAP) to detect deviations. Implementing such scans in the staging environment would catch deviations before production.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Increase the number of testers
Why it's wrong here
More testers may not catch configuration deviations if testing is manual.
- ✗
Require CAB approval for all future changes
Why it's wrong here
CAB approval does not detect configuration deviations.
- ✓
Implement automated configuration scanning in the staging environment
Why this is correct
Automated scanning can detect deviations from the baseline before implementation.
- ✗
Use a different change management process
Why it's wrong here
The process is not the issue; testing controls need improvement.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.