Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
As an actual firewall admin, testing the policy in non-production environment makes absolutely no sense at all. The best thing to do would have been to go to change management but even better would be to create rules to permit the server traffic. This is a bad question
I agree with 'B'. Should be tested within a non-production environment first. Once tested and cleared, than do the Change Request.
The correct answer is B. The option "A", Change Management happens to PREVENT issues BEFORE the issue happens. It needs to be approved first and it is used as a Backout plan/Roll back, in case it goes down/causes outages (just like in the scenario). Since in this scenario, the issue has already happened (wasn't prevented), the best course of action would be to test first, then adjust the policy, then document the new policy and submit it to Change Management.