Question

Difficulty: MediumChange Management Processes

An IT systems administrator is preparing a formal change request to apply a critical operating system patch to a pool of virtual desktop infrastructure (VDI) hosts that support the financial reporting team. Which of the following components must be documented and included in the change request prior to submitting it to the Change Advisory Board (CAB) for approval? (Select TWO).

  1. A comprehensive rollback plan detailing specific procedure steps to restore previous desktop templates if issues ariseAnswer
  2. A risk analysis evaluating potential business disruption and impact associated with the changeAnswer
  3. C
    Post-implementation testing logs generated from performing the patch installation on live production desktops
  4. D
    A permanent executive authorization waiver that eliminates the need for future patch documentation

Answer

The change request submitted to the CAB must include a comprehensive rollback plan and a risk analysis evaluating potential business impact.
A formal change request submitted for Change Advisory Board (CAB) review must include a clear risk assessment detailing business impact and a documented rollback plan specifying recovery procedures if the change fails. Both elements allow stakeholders to weigh benefits against potential downtime and ensure business continuity.

Step-by-Step Solution

1
Identify the mandatory pre-approval documentation requirements in the CompTIA change management workflow.
Before submitting a proposal to the CAB, the administrator must define the scope of change, perform a risk assessment, plan for the change, outline a rollback plan, and schedule end-user notifications.
CAB approval relies on knowing the purpose, risk profile, and contingency plans prior to granting authorization for production changes.
2
Evaluate the option regarding a detailed rollback plan.
Valid required element.
If a critical update causes hypervisor or OS instability, a documented backout plan ensures service restoration.
3
Evaluate the option regarding a risk analysis.
Valid required element.
The risk assessment details the likelihood and impact of downtime or failure on business operations.
4
Evaluate incorrect options (production post-testing logs and executive waivers).
Invalid elements.
Post-implementation testing takes place after deployment approval, while executive waivers cannot bypass essential lifecycle documentation.

Key Concept

Formal Change Management Request Elements
Rate this question