CV0-003 · Question #69
Every quarter, technicians perform a UPS and generator test at the datacenter. During the test, the diesel generators did not function correctly resulting in a datacenter black out. After the…
The correct answer is B. Change management policy. A change management policy ensures operational procedures like post-outage recovery are formally documented and executed, preventing ad-hoc actions that skip critical steps such as VM boot sequencing.
Question
Every quarter, technicians perform a UPS and generator test at the datacenter. During the test, the diesel generators did not function correctly resulting in a datacenter black out. After the engineers restore power, they quickly turn on each device and go home for the day. The next morning, clients start reporting they are not receiving email. After investigation, the engineers find that not all VMs are online and it is determined that some VMs did not start up in a correct sequence. Which of the following policies might need to be reviewed to help remediate the above scenario?
Options
- AMonitoring policy
- BChange management policy
- CService level agreement policy
- DBoot sequence policy
How the community answered
(51 responses)- A12% (6)
- B65% (33)
- C4% (2)
- D20% (10)
Why each option
A change management policy ensures operational procedures like post-outage recovery are formally documented and executed, preventing ad-hoc actions that skip critical steps such as VM boot sequencing.
A monitoring policy would alert staff that VMs are offline after the fact but does not define or enforce the documented recovery steps that would have ensured the correct boot sequence.
Change management policy requires that recovery and restoration procedures be planned, documented in approved runbooks, and followed step-by-step, including the correct VM startup order. The engineers powered on devices arbitrarily and left without verification - behavior that a change management process would have prevented by mandating a documented recovery checklist with defined acceptance criteria before closing the incident.
A service level agreement defines availability and performance commitments to clients but does not govern the internal operational runbooks or procedures used during recovery events.
A boot sequence policy addresses the specific startup order for systems, but without the broader change management framework that mandates its use during recovery events, the engineers had no obligation to consult it.
Concept tested: Change management policy governing documented recovery procedures
Source: https://csrc.nist.gov/publications/detail/sp/800-128/final
Topics
Community Discussion
No community discussion yet for this question.