To address an active security advisory affecting perimeter routing hardware, an engineer is tasked with implementing an urgent software patch. Before committing the patch package to primary operational equipment, which set of procedures best ensures network stability and recovery capability in accordance with standard maintenance practices?
- Validate the cryptographic hash of the patch package, take a complete configuration and software image backup, and test the update within a staging environment.Answer
- BPerform an incremental backup to save maintenance window time, apply the update directly to active nodes, and audit device performance post-installation.
- CDeploy the patch across production nodes immediately to neutralize the vulnerability, then establish a testing baseline if operational anomalies occur.
- DDowngrade SNMP monitoring protocols to SNMPv1 to prevent monitoring overhead during installation and push the patch without verifying payload signatures.
Answer
Validate the cryptographic hash of the patch package, take a complete configuration and software image backup, and test the update within a staging environment.
Verifying the file hash guarantees file integrity. Creating a full configuration and image backup provides a verified recovery path, and executing lab testing ensures stability prior to live deployment.
Step-by-Step Solution
Key Concept
Pre-deployment validation, baseline backup creation, and staging in patch management lifecycles.