Examkin

Soru

Zorluk: Çok zorChange Management and Security Impacts

During an emergency response to a critical zero-day remote code execution vulnerability on an enterprise edge gateway, an administrator bypassed standard Change Advisory Board (CAB) review and applied an emergency patch directly to production systems. Within minutes of application, critical external API endpoints began returning persistent HTTP 500 errors, causing high-priority business service outages. To handle this ongoing operational disruption while adhering to formal change management frameworks, which of the following actions should the security operations team take FIRST?

  1. Execute the pre-approved emergency rollback plan to restore the last known stable configuration while recording the security impact.Cevap
  2. B
    Reclassify the emergency software patch as a detective administrative control to bypass post-implementation verification requirements.
  3. C
    Disable all network firewall rule sets on the edge gateway to mitigate the software vulnerability flaws causing API service failure.
  4. D
    Trigger an automated orchestration playbook to isolate all internal application servers from the network infrastructure upon receiving service error alerts.

Cevap

Execute the pre-approved emergency rollback plan to restore the last known stable configuration while recording the security impact.
The primary objective of change management during a failed emergency deployment is to rapidly minimize business disruption while maintaining security integrity. Executing a documented, pre-approved rollback plan restores the system to a known good baseline state and ensures the security impact is recorded for subsequent review by the Change Advisory Board (CAB).

Adım Adım Çözüm

1
Analyze the operational impact of the emergency change
Identified that an unvetted emergency change caused active service degradation across production APIs
Emergency changes carry inherent risk of unexpected operational side effects if not thoroughly tested
2
Select the appropriate change control response procedure
Identified the emergency rollback plan as the immediate prioritized action
Standard change management governance dictates using documented, pre-tested rollback plans to restore baseline operations immediately when a deployment destabilizes production environments
3
Initiate post-implementation security analysis
Captured audit logs and documented security impacts for subsequent CAB review
Even emergency changes and rollbacks require thorough documentation and security impact assessments to refine future change workflows

Anahtar Kavram

Emergency Change Control and Rollback Execution
Bu soruyu puanla

Konular

Change Management and Security Impacts

Bu konudan daha fazla soru