Examkin

Question

Difficulty: HardConfiguration and Change Management

During an automated compliance scan, a network operations team discovers that several edge firewalls have drifted from the approved baseline configuration due to unrecorded manual modifications made during a previous outage. To bring the firewalls back into compliance while adhering to strict change management protocols, which of the following actions MUST the team perform? (Select TWO.)

  1. Submit a formal Request for Change (RFC) detailing the configuration drift, risk evaluation, rollback procedures, and proposed baseline synchronization.Answer
  2. Obtain authorization from the Change Advisory Board (CAB) and schedule the baseline restoration within an approved maintenance window.Answer
  3. C
    Manually push the baseline configuration directly to live firewalls immediately to bypass change approval, since restoring established settings carries zero operational risk.
  4. D
    Restore the firewall configurations using only the latest differential configuration file without applying the preceding full baseline snapshot.

Answer

The team must submit a formal Request for Change (RFC) outlining the drift remediation plan and obtain approval from the Change Advisory Board (CAB) to execute the restoration within a scheduled maintenance window.
Remediating configuration drift requires filing a formal Request for Change (RFC) to document the planned modifications, impacts, and rollback procedures. Furthermore, because production firewalls affect network availability and security, the change must be reviewed by the Change Advisory Board (CAB) and scheduled during an authorized maintenance window.

Step-by-Step Solution

1
Identify and document the extent of configuration drift across the target firewall devices.
Discrepancies between running configurations and the authorized baseline repository are cataloged.
Accurate scope definition is required before assessing risk and writing an RFC.
2
Draft a detailed Request for Change (RFC) including a rollback plan and risk assessment.
Formal change documentation is submitted for administrative review.
Every planned modification to production network infrastructure must undergo standard change management evaluation.
3
Present the RFC to the Change Advisory Board (CAB) for authorization and schedule the execution window.
Approval is granted and the task is assigned to an official maintenance window.
CAB approval ensures stakeholder alignment and minimizes disruption to business operations.

Key Concept

Configuration Drift Remediation and Change Management Governance
Estimated Time:2m 0s
Rate this question

Topics

Configuration and Change Management

More questions from this topic