SSCP Security Operations and Administration Practice Question
Which THREE of the following are valid steps in the change management process? (Select THREE)
⚠ Common exam trap
It's easy for candidates to confuse operational security activities like vulnerability scanning or configuration updates with formal change management process steps, which are specifically about the lifecycle of a change request from submission through review.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Post-implementation review
A post-implementation review is a valid step in the change management process because it evaluates whether the change met its objectives, identifies any issues, and captures lessons learned. This review typically occurs after the change has been implemented and verified, ensuring that the change was successful and that any unintended consequences are documented.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Post-implementation review
Why this is correct
After implementation, a review ensures the change was successful and lessons are learned.
- ✗
Vulnerability scanning
Why it's wrong here
Vulnerability scanning is part of patch management, not a step in change management.
- ✗
Baseline configuration update
Why it's wrong here
Updating baseline configuration may result from a change, but it is not a step in the change management process.
- ✓
Impact assessment
Why this is correct
Assessing the potential impact of the change is a required step.
- ✓
Change request submission
Why this is correct
The first step is to submit a formal change request.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 920 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.