nerdexam
CompTIA

CAS-003 · Question #287

The manager of the firewall team is getting complaints from various IT teams that firewall changes are causing issues. Which of the following should the manager recommend to BEST address these issues?

The correct answer is A. Set up a weekly review for relevant teams to discuss upcoming changes likely to have a. A (Set up a weekly review for relevant teams to discuss upcoming changes) is the best answer because it addresses the root cause: affected teams are not being consulted before changes are made. A recurring cross-team review meeting is a formal change management control that…

Enterprise Security Operations

Question

The manager of the firewall team is getting complaints from various IT teams that firewall changes are causing issues. Which of the following should the manager recommend to BEST address these issues?

Options

  • ASet up a weekly review for relevant teams to discuss upcoming changes likely to have a
  • BUpdate the change request form so that requesting teams can provide additional details
  • CRequire every new firewall rule go through a secondary firewall administrator for review
  • DRequire the firewall team to verify the change with the requesting team before pushing the

How the community answered

(48 responses)
  • A
    79% (38)
  • B
    2% (1)
  • C
    13% (6)
  • D
    6% (3)

Explanation

A (Set up a weekly review for relevant teams to discuss upcoming changes) is the best answer because it addresses the root cause: affected teams are not being consulted before changes are made. A recurring cross-team review meeting is a formal change management control that gives stakeholders visibility into planned changes, an opportunity to flag conflicts, and time to prepare. This is a proactive, collaborative approach that prevents issues rather than reacting to them. Option B (better forms) improves information gathering but still puts the firewall team in isolation. Option C (secondary admin review) is a peer review within the firewall team only and does not involve the affected business teams. Option D (verify after the fact) is reactive - changes are already pushed when verification occurs, not preventing the disruption.

Topics

#change management#firewall management#IT governance#communication

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice