Examkin

Question

Difficulty: HardChange Management Processes

A lead infrastructure technician is preparing a formal change proposal to upgrade the main firewall firmware across three data centers to mitigate a critical security vulnerability. The technician has specified the change purpose, established the change scope, performed a thorough risk assessment, detailed the implementation steps, and scheduled end-user notifications. Which of the following critical components must also be included in the proposal before submitting it to the Change Advisory Board (CAB)?

  1. A comprehensive roll-back plan providing step-by-step procedures to revert the firewalls to their prior stable state if errors occur.Answer
  2. B
    Execution logs demonstrating successful installation of the firmware update on production security gateways.
  3. C
    A formal waiver exempting the security team from conducting post-change validation testing.
  4. D
    An incident response chain of custody log detailing evidence collected from a active data breach.

Answer

A comprehensive roll-back plan providing step-by-step procedures to revert the firewalls to their prior stable state if errors occur.
In formal IT change management, every major change submitted for Change Advisory Board (CAB) authorization must contain a clearly defined rollback (or backout) plan. This plan details the exact technical steps needed to reverse the change and restore the system to its previous operational state in the event of an implementation failure or critical instability.

Step-by-Step Solution

1
Analyze the change management workflow requirements.
Identified that a formal change request must contain key elements prior to CAB submission: purpose, scope, risk analysis, change plan, rollback plan, and end-user notification.
CAB approval requires full risk mitigation planning before authorizing modifications to critical production infrastructure.
2
Evaluate missing required elements from the scenario.
The technician has prepared the purpose, scope, risk assessment, implementation plan, and notifications, but has omitted the rollback (backout) plan.
Without a documented method to reverse changes during a failure, the change poses an unmanaged operational risk.
3
Select the required component.
A rollback plan is mandatory for CAB submission.
It ensures business continuity by detailing how to return systems to a known good configuration if implementation issues arise.

Key Concept

CompTIA Change Management Lifecycle Elements
Estimated Time:1m 30s
Rate this question

Topics

Change Management Processes

More questions from this topic