Question

During a critical outage at 2 a.m., an on-call systems administrator applies an unapproved firewall rule change to restore a failed VPN concentrator that thousands of remote employees depend on. The change works and service is restored. Following the organization's change management process, what should the administrator do next?

Accepted Answer

Document the emergency change and submit it for retroactive review and approval by the change advisory board

Answer

Nothing further, since the change was successful and the outage is resolved

Answer

Immediately roll back the change and wait for normal change approval during business hours

Answer

Delete the associated log entries to avoid triggering a policy-violation alert for the unapproved change