nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #556

In a change management process, what is the purpose of Verification and Audit?

The correct answer is B. Verify that newly applied changes don't break anything. In change management, Verification and Audit (also called testing and validation) ensures that after a change is implemented, the system still functions as expected and no regressions or unintended side effects were introduced. Option A describes a change request process…

Security Operations

Question

In a change management process, what is the purpose of Verification and Audit?

Options

  • ARequest changes to a baseline
  • BVerify that newly applied changes don't break anything
  • CIdentify the baseline of a system
  • DProvide a minimum level of protection to developers

How the community answered

(59 responses)
  • A
    7% (4)
  • B
    88% (52)
  • C
    3% (2)
  • D
    2% (1)

Explanation

In change management, Verification and Audit (also called testing and validation) ensures that after a change is implemented, the system still functions as expected and no regressions or unintended side effects were introduced. Option A describes a change request process, Option C describes establishing a configuration baseline, and Option D relates to developer security policies. The V&A step specifically closes the loop on the change by confirming it was applied correctly and did not break existing functionality.

Topics

#Change Management#Verification#Audit#Security Operations

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice