2. 计算机
  3. There are often scenarios where the IT staff must react to emergencies and quickly apply fixes or change configurations. When de

There are often scenarios where the IT staff must react to emergencies and quickly apply fixes or change configurations. When de

admin2013-12-19  52
问题 There are often scenarios where the IT staff must react to emergencies and quickly apply fixes or change configurations. When dealing with such emergencies, which of the following is the best approach to making changes?
选项 A、Review the changes within 48 hours of making them.
B、Review and document the emergency changes after the incident is over.
C、Activity should not take place in this manner.
D、Formally submit the change to a change control committee and follow the complete change control process.
答案B
解析 B正确。当事故或者紧急情况结束后，员工应该对变更进行审核，以确保它们是正确的，且没有打开安全漏洞或影响互操作性。这些变更需要正确地文档化，并需要通知系统拥有者有关变更的情况。
A不正确。因为这不是最佳答案。事故结束后应该对变更进行审核，但不一定要在48小时内。在大多数情况下，应该在变更被实施后的数小时内审核它们，而不是在数天内。
C不正确。因为不发生紧急状况固然很好，但它们是不可避免的。例如，IT管理员需要不时地推出补丁或者改变配置来保护系统免受明显漏洞的侵害。
D不正确。因为如果发生紧急情况，那么根本来不及把变更提交给变更控制委员会，并遵循完整的变更控制流程。这些步骤往往只适合于在网络或者环境中出现较大变更时。这类变更的代价一般都很昂贵，并对公司的影响较为长久。
转载请注明原文地址:https://kaotiyun.com/show/KAhZ777K
0

CISSP认证

相关试题推荐
随机试题
最新回复(0)