ISC2 CISSP Exam - Topic 5 Question 70 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 70
Topic #: 5

[All CISSP Questions]

After following the processes defined within the change management plan, a super user has upgraded a

device within an Information system.

What step would be taken to ensure that the upgrade did NOT affect the network security posture?

AConduct an Assessment and Authorization (A&A)

BConduct a security impact analysis

CReview the results of the most recent vulnerability scan

DConduct a gap analysis with the baseline configuration

Show Suggested Answer

Suggested Answer: D

by Teri at Apr 19, 2023, 06:17 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rene

4 months ago

I agree with B, it’s all about understanding the impact!

upvoted 0 times

...

Marshall

4 months ago

Wait, are we really not doing a gap analysis? That seems risky!

upvoted 0 times

...

Ashlyn

4 months ago

A&A is important, but I’d go with B too.

upvoted 0 times

...

Darrin

4 months ago

I think C is more relevant, gotta check those vulnerabilities first.

upvoted 0 times

...

Mendy

4 months ago

Definitely B, security impact analysis is key!

upvoted 0 times

...

Georgene

5 months ago

I vaguely recall that a gap analysis with the baseline configuration could help identify any discrepancies after the upgrade, but I’m not confident about that.

upvoted 0 times

...

Barney

5 months ago

I'm leaning towards conducting an Assessment and Authorization, but I feel like a security impact analysis might be more relevant in this case.

upvoted 0 times

...

Belen

5 months ago

I remember practicing a question similar to this, and I think reviewing the results of the most recent vulnerability scan could be important too.

upvoted 0 times

...

Sarah

5 months ago

I think we might need to conduct a security impact analysis to see how the upgrade affects our security posture, but I'm not entirely sure.

upvoted 0 times

...

Lazaro

5 months ago

This seems like a tricky question. I'll need to think through the different ways groups and categories can be linked in capacity planning.

upvoted 0 times

...

Erasmo

5 months ago

I feel pretty confident about this one. The wildcard .* in option D should match all the file paths and extensions listed in the question.

upvoted 0 times

...

Marget

5 months ago

I feel like this could relate to insufficient authorization, but wouldn't that be more about access control rather than handling XML input? I'm a bit uncertain.

upvoted 0 times

...

Armando

9 months ago

Conducting a security impact analysis? What is this, amateur hour? Real IT pros do it while juggling chainsaws and unicycling.

upvoted 0 times

...

Lyla

9 months ago

Haha, this is a no-brainer! B is the clear winner. Unless you want your network to turn into a cybersecurity horror show, that is.

upvoted 0 times

Louann

8 months ago

Julene: It's a no-brainer, B is the way to go.

upvoted 0 times

...

Hermila

8 months ago

User 3: Definitely, we need to make sure the upgrade doesn't compromise our network security.

upvoted 0 times

...

Julene

8 months ago

User 2: Agreed, conducting a security impact analysis is crucial.

upvoted 0 times

...

Ocie

8 months ago

User 1: I think B is the best option here.

upvoted 0 times

...

Detra

9 months ago

Security impact analysis all the way! Can't be too careful when it comes to network security, am I right? Don't want any unexpected surprises.

upvoted 0 times

...

Benedict

10 months ago

I was torn between B and D, but I agree that B is the way to go. Gotta make sure that upgrade doesn't open any new security holes.

upvoted 0 times

Bethanie

8 months ago

User 3: Yeah, reviewing the results of the most recent vulnerability scan is also important to double-check.

upvoted 0 times

...

Cammy

8 months ago

User 2: I agree, we need to make sure the upgrade doesn't create any new vulnerabilities.

upvoted 0 times

...

Corinne

8 months ago

User 1: I think conducting a security impact analysis is the best way to ensure network security.

upvoted 0 times

...

Pamella

10 months ago

I think the correct answer is B) Conduct a security impact analysis. That's the best way to ensure the upgrade doesn't compromise the network security.

upvoted 0 times