Which configuration management practice prevents unauthorized changes from being deployed to production?
A CISSP practice question covering Domain 7: Security Operations. Try answering before reading the explanation below.
Show options & answer
Why "Formal change management with CAB approval, testing, and rollback plans" is the right answer
Mature change management gates production changes through review, testing, scheduling, communication, and rollback planning. CAB (Change Advisory Board) reviews risky changes. The other options are anti-patterns.
Study videos for this topic
Want to go deeper on Domain 7? Watch the full breakdown — every video is free, no account, no upsell.
Take the full CISSP practice test
120 questions, instant explanations, study-video links on every miss. No account.