ISC2 · CISSP
Operations, configuration, patch, and change management
CISSP · Lesson 28 of 34 · 3:33:30
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: defense in depth, need-to-know and least privilege, separation of duties, privileged account management, job rotation, configuration management with baselines and automation, patch and vulnerability management, and change management. Includes three original practice questions.
Preview the topics
- One employee can both create a new supplier and approve payments to it. Which principle is missing?
- A firewall rule was changed at night, without any request or approval, and nobody can explain it. How should Larkspur treat it?
- Which document defines the approved, hardened configuration of a server type, against which drift is measured?