Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CISSP Exam - Topic 6 Question 11 Discussion

Posted by Lorrie on May 05, 2022 at 05:08 AM

Directive controls are a form of change management policy and procedures. Which of the following subsections are recommended as part of the change management process?

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
LE
Leota 11 months ago
Wait, are we sure all these are recommended?
MO
Mona 12 months ago
Totally agree with D, selecting controls is key!
CE
Ceola 12 months ago
C seems a bit off for change management.
SU
Susana 12 months ago
I think B is crucial too!
KI
King 1 year ago
A is definitely part of the process!
NI
Nieves 1 year ago
I’m a bit confused about the options. I thought selecting security controls was more of a preliminary step rather than part of the change management process itself.
BU
Buffy 1 year ago
I practiced a similar question where we had to identify steps in change management. I feel like "Build and test" is definitely a key part of that process.
RO
Royal 1 year ago
I think "Implement security controls" might be part of the process, but I also recall something about categorizing information systems being important too.
KR
Kristofer 1 year ago
I remember studying change management processes, but I'm not entirely sure which subsections are specifically recommended.
MA
Marcelle 1 year ago
I'm a bit confused by this question. Should I apologize for my lack of experience like in option C? Or is it better to just keep it simple and ask how I can help as in option D? I'm not sure which approach would be best for a first-time service desk call.
AL
Alonso 1 year ago
This is a tricky one. I know we've covered serverless security in class, but the specific details are escaping me at the moment. I think I'll eliminate the options that seem less relevant, and then make an educated guess between the remaining choices.
MA
Marshall 1 year ago
I'm a bit confused here. Do we need to obtain information security management approval first, or can we just focus on the integrity of the application? I'm not sure which approach is best.
0/2000 characters

Save Cancel