CompTIA Security+ (SY0-701) — Question 166

Which of the following describes effective change management procedures?

Answer options

• A. Approving the change after a successful deployment
• B. Having a backout plan when a patch fails
• C. Using a spreadsheet for tracking changes
• D. Using an automatic change control bypass for security updates

Correct answer: B

Explanation

Option B is correct because having a backout plan ensures that if a patch fails, systems can be restored to their previous state, minimizing disruption. The other options are ineffective; approving changes after deployment (A) can lead to greater issues, using a spreadsheet (C) is not a systematic approach, and bypassing change control (D) can create security vulnerabilities.