220-1102 Operational Procedures Practice Question
A technician is deploying a critical security patch to all company workstations. The patch has been approved by the Change Advisory Board (CAB) and tested in a lab environment. During the rollout, the technician discovers that several older workstations are not compatible with the patch and the installation fails. According to change management best practices, what should the technician do FIRST?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Stop the deployment and report the issue to the CAB for guidance.
According to change management best practices, if an unexpected issue arises during deployment (such as incompatibility), the technician should stop the deployment immediately and report the issue to the CAB. The CAB can then assess the situation, decide on a course of action (e.g., a backout plan or an emergency change), and authorize further steps. Continuing despite the failure could lead to system instability or security gaps. Skipping workstations without documentation violates change control. Attempting to fix the workstations without approval bypasses the established process.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Continue the deployment on the compatible workstations and skip the incompatible ones.
Why it's wrong here
Continuing the rollout only on compatible workstations is a scope deviation that was never approved by the change advisory board (CAB). The approved change plan defines the full deployment scope, and a partial deployment can leave an inconsistent security posture while making the change record misleading because the patch is recorded as deployed even though a subset of systems remains vulnerable. Any decision to alter the rollout population, such as skipping incompatible hosts, must be escalated to the CAB for a formal risk-based decision rather than made unilaterally by the technician.
- ✗
Revert the change completely and submit a new change request for the incompatible workstations.
Why it's wrong here
Reverting the change completely without CAB authorization is itself an unauthorized change, and it may be more disruptive than the situation warrants. A full backout could revert other dependent configuration changes or affect systems that were successfully patched, and the CAB may instead decide on a targeted rollback, an emergency fix, or compensating controls. The technician's first duty is to stop and report the anomaly so the CAB can perform an impact analysis and formally initiate a backout or a new change request if needed.
- ✓
Stop the deployment and report the issue to the CAB for guidance.
Why this is correct
Stopping and promptly reporting the issue to the CAB is the correct first step. The CAB will assess the situation and determine the next steps, such as modifying the change or initiating a backout plan.
- ✗
Proceed with the deployment and attempt to manually fix the incompatible workstations.
Why it's wrong here
Proceeding to manually fix incompatible workstations introduces ad hoc, untested modifications that violate the approved implementation and backout plans. Such manual 'fixes' create configuration drift, may invalidate security baselines, and obscure the root cause of the incompatibility, which could be a defect in the patch itself or a conflict requiring vendor support. The correct behavior in change management is to halt the deployment, preserve the current state, and escalate to the CAB so that any remediation is tested, approved, and documented through the proper process.
Go deeper
Related to this question
Learn chapter
Physical Security: Locks, Cameras, Access Badges
Key term
Change management
Change management is the structured process of planning, approving, implementing, and reviewing changes to IT systems to minimize risk and disruption.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 925 original 220-1102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1102 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1102 exam.