7.0 Security Operations
Operations & Continuity Practice Questions
Change and patch management, separation of duties, backup strategies, RTO/RPO/MTD, and recovery sites.
One solved question, so you can see how these are marked
A production server requires an urgent security patch. What is the BEST first action in a mature change-management process?
Document the change, assess its risk and dependencies, and obtain the required authorization.
The change should be documented, assessed for impact, and authorized before controlled implementation, with emergency procedures used when appropriate. Immediate unreviewed deployment risks outages, an annual wait leaves a known vulnerability exposed, and unilateral approval weakens separation of duties.
Every question in the set below is marked like this. The answers stay hidden until you pick one.