1.3 Explain the importance of change management processes and the impact to security
Objective 1.3 sits in General Security Concepts, which carries 12% of the Security+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.
Objective title verbatim from the official objectives. CompTIA exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A development team configures branch policies so a pull request cannot merge into the main branch until at least two reviewers approve it. This requirement enforces which change management concept?
The concept
Change management includes business processes that define how a proposed change is reviewed and authorized before it takes effect.
Why this answer
Requiring reviewer approval before a pull request can merge is a formal sign-off step, which is a business process control over when and how a change is applied.
- ARollback is a version control and recovery activity, not the approval step being described here.
- Correct. A required sign-off gates the merge.
- CVersion tagging labels a completed release; it does not describe pre-merge approval.
- DPhysical access restriction is a physical control unrelated to reviewer sign-off on code.
Now you: objective 1.3 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A development team configures its main branch so every change must pass through a pull request and receive reviewer approval before it merges. Which change management concept does this practice illustrate?
Sample question 2 of 3
A repository administrator enables the setting that prevents the most recent person who pushed code from also counting as an approving reviewer on that pull request. Which business process element of change management is being enforced?
Sample question 3 of 3
After a patch cycle completes, a change manager reviews the update platform's compliance dashboard to record which servers received the update and retains the report for a future audit. Which change management activity is this?
That’s 3 of the full Security+ bank.
Keep going free: 10 questions per certification in bank practice, with no account.
Continue practicingRead the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.