New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 CISSP Exam - Topic 3 Question 9 Discussion

Actual exam question for ISC2's CISSP exam
Question #: 9
Topic #: 3
[All CISSP Questions]

Change management policies and procedures belong to which of the following types of controls?

Show Suggested Answer Hide Answer
Suggested Answer: A

https://books.google.com.pk/books?id=9gCn86CmsNQC&pg=PA570&lpg=PA570&dq=CISSP+Change+management+policies+and+procedures+belong+to+which+type+of+control&source=bl&ots=riGvVpUO4H&sig=ACfU3U0kRWWaIIj7gwqlovVku880wG5LOg&hl=en&sa=X&ved=2ahUKEwjA7cGL_anpAhULxoUKHc1lD3UQ6AEwCnoECBIQAQ#v=onepage&q=CISSP%20Change%20management%20policies%20and%20procedures%20belong%20to%20which%20type%20of%20control&f=false

by Arlene at May 05, 2022, 07:14 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Shawna
4 months ago
Yup, Directive is the way to go here!
upvoted 0 times
...
Leslie
4 months ago
Wait, are we sure it's not Corrective?
upvoted 0 times
...
Jess
4 months ago
Agreed, it's all about guiding behavior.
upvoted 0 times
...
Gilberto
4 months ago
I thought they were more Preventative.
upvoted 0 times
...
Jettie
5 months ago
Definitely Directive controls!
upvoted 0 times
...
Darrel
5 months ago
I practiced a similar question where we discussed corrective controls, but I don't think that's the right answer for this one.
upvoted 0 times
...
Bethanie
5 months ago
I'm a bit unsure, but I feel like these policies might also have a preventative aspect since they aim to avoid issues before they arise.
upvoted 0 times
...
Merrilee
5 months ago
I remember studying that Detective controls are for identifying issues after they happen, which doesn’t seem to fit here.
upvoted 0 times
...
Lindsey
5 months ago
I think change management policies are more about guiding actions, so maybe they fall under Directive controls?
upvoted 0 times
...
Claribel
5 months ago
I think the answer is C - a visit-based segment with one exclude condition for the page "Shopping Checkout". That seems like the most straightforward way to exclude those visits.
upvoted 0 times
...
Whitley
5 months ago
Hmm, I'm not too sure about this one. I'll need to review the BPM Suite 12c components more closely to figure this out.
upvoted 0 times
...
Ellsworth
5 months ago
This seems straightforward - we need to analyze average sales by product number and country, so I think the answer is D.
upvoted 0 times
...
Gracia
5 months ago
Okay, let's see. Controlling access from one place, seeing user and device details, and stopping threats - those all sound like clear benefits. The tricky part is figuring out which one is not a benefit. I'll have to think this through carefully.
upvoted 0 times
...

Save Cancel