Question

Difficulty: MediumPatch Management and Software Maintenance

A network administrator is preparing to apply a major firmware update to enterprise distribution switches following a vendor security advisory. Which TWO of the following actions should the administrator perform during the pre-deployment and staging phase to verify software integrity and minimize operational risk?

  1. Verify the cryptographic hash of the downloaded firmware file against the vendor's published digest.Answer
  2. Test the firmware update in an isolated lab environment that mirrors the production device configuration.Answer
  3. C
    Apply the update directly to active core switches during peak hours to evaluate performance under heavy live traffic.
  4. D
    Perform a complete rollback restore using only an incremental backup without validating the baseline system image.

Answer

The administrator should verify the cryptographic hash of the downloaded firmware file against the published digest and test the firmware update in an isolated lab environment mirroring production.
Verifying the cryptographic hash ensures file integrity and authenticity before deployment, while testing the patch in an isolated lab sandbox ensures that unexpected bugs or configuration incompatibilities are identified prior to affecting live production network services.

Step-by-Step Solution

1
Inspect the integrity of the downloaded image file.
Confirming the SHA-256 digest ensures the firmware image is uncorrupted and authentic.
Corrupted or malicious firmware binaries can render network switches completely unbootable.
2
Stage and validate the patch in a non-production environment.
Testing identifies unanticipated software bugs, protocol interactions, or failure modes safe from production impact.
Pre-deployment lab validation ensures stability and validates rollback scripts before scheduled maintenance windows.

Key Concept

Patch Verification and Staging Practices
Estimated Time:1m 30s
Rate this question