A software engineering team is preparing to deploy an updated microservice that modifies shared container network policies and ingress routing rules within a production Kubernetes cluster. Which of the following steps must be completed as part of the formal change management workflow to evaluate and mitigate security risks prior to implementation? (Select TWO.)
- Conduct security impact testing and dependency analysis within a staging environment that mirrors production configurations.Cevap
- Establish and validate a documented backout plan to restore previous routing rules and network policies if anomalies occur.Cevap
- CConfigure compensating web application firewall rules to dynamically override unauthorized changes to container policy files.
- DApply host operating system security patches across all cluster nodes to mitigate potential buffer overflow execution during rollout.
Cevap
The change management workflow requires conducting security impact testing in a staging environment that mirrors production and establishing a validated backout plan to restore previous network configurations if issues arise.
Proper change management requires testing proposed changes in a staging environment to assess security impacts and dependencies, alongside maintaining a tested rollback plan to quickly revert changes if security or operational issues arise.
Adım Adım Çözüm
Anahtar Kavram
Change Management Security Impact and Rollback Planning