CGRC · Question #111
Common activities within organizations can cause changes to systems or the environments of operation and can have significant impact on the security posture of systems. Which of the following is not…
The correct answer is C. Moving to a new facility. This question asks to identify which activity among the choices is NOT considered a direct system change that impacts security posture.
Question
Common activities within organizations can cause changes to systems or the environments of operation and can have significant impact on the security posture of systems. Which of the following is not an example of system a system change? Response:
Options
- AInstalling patches outside of the established configuration change control process
- BInstalling or disposing of hardware
- CMoving to a new facility
- DMaking changes to configuration
How the community answered
(54 responses)- A2% (1)
- B2% (1)
- C91% (49)
- D6% (3)
Why each option
This question asks to identify which activity among the choices is NOT considered a direct system change that impacts security posture.
Installing patches, especially outside of change control, is a direct modification to a system's software, which is a significant system change.
Installing or disposing of hardware directly alters the physical components of a system, constituting a system change.
Moving to a new facility is an operational or environmental change, not a direct system change to the IT systems themselves. While it can impact system security, it is not an alteration of a system's software, hardware, or configuration.
Making changes to configuration directly modifies how a system operates and is a fundamental system change.
Concept tested: Understanding system changes vs. environmental changes
Topics
Community Discussion
No community discussion yet for this question.