Question

Difficulty: HardConfiguration and Change Management

During an approved maintenance window, a network engineering team applies a critical software update to an enterprise SD-WAN orchestrator cluster. During post-implementation validation, monitoring systems alert that multiple IPsec tunnels to remote branch sites are experiencing severe degradation and packet drop. With only 10 minutes remaining in the maintenance window and no immediate root cause identified, which of the following is the most appropriate action for the team to execute?

  1. Immediately execute the documented rollback plan to restore the SD-WAN orchestrator cluster to its pre-change baseline configuration before the maintenance window expires.Answer
  2. B
    Implement immediate ad-hoc configuration modifications directly on branch routers to bypass orchestrator control while continuing troubleshooting past the maintenance window end time.
  3. C
    Reconfigure branch hosts to use individual physical interface IP addresses on edge routers rather than the configured Virtual IP (VIP) address to restore tunnel connectivity.
  4. D
    Perform an emergency full restoration of the cluster from nightly incremental backups without applying the required previous full backup set.

Answer

Execute the documented rollback plan to restore the SD-WAN orchestrator cluster to its pre-change baseline configuration before the maintenance window expires.
Executing the pre-approved rollback plan ensures the network returns to a known stable baseline configuration within the allocated maintenance window, preventing unvetted changes from impacting normal business operations.

Step-by-Step Solution

1
Evaluate post-implementation state against success criteria and maintenance window constraints.
Validation failed due to IPsec tunnel degradation, and remaining maintenance window time is insufficient for deep troubleshooting.
Changes must be fully validated or rolled back within the agreed maintenance window to minimize impact on production service.
2
Determine the appropriate change management protocol for failed changes.
Triggering the documented and pre-approved rollback plan is mandatory when post-change testing fails.
Executing the rollback restores the network to a known stable operational baseline safely.

Key Concept

Change Management Maintenance Window & Rollback Triggers
Rate this question