6.4.5.4 requires what to ensure rollback capability?

6.4.5.4 requires what to ensure rollback capability?

• A. Immediate production deployment
• B. Back-out procedures
• C. Logging only
• D. Decommission after patch

Answer: (B)

Rollback capability relies on having tested back-out procedures in place before making changes. When security patches or configuration updates are applied, there’s always a risk of instability, compatibility issues, or unintended side effects. A back-out plan provides the exact steps to revert the system to its previous state, including restoring software versions, configurations, and data integrity checks to ensure service can resume normally. It also typically covers prerequisites like verified backups, change-control approvals, and post-change validation, so the organization can recover quickly if the patch introduces problems. This is why back-out procedures are the essential element for rollback capability. Relying on immediate production deployment offers no safe mechanism to undo changes, logging alone doesn’t provide a practical way to revert, and decommissioning after a patch doesn’t address restoring full functionality.

Rollback capability relies on having tested back-out procedures in place before making changes. When security patches or configuration updates are applied, there’s always a risk of instability, compatibility issues, or unintended side effects. A back-out plan provides the exact steps to revert the system to its previous state, including restoring software versions, configurations, and data integrity checks to ensure service can resume normally. It also typically covers prerequisites like verified backups, change-control approvals, and post-change validation, so the organization can recover quickly if the patch introduces problems.

This is why back-out procedures are the essential element for rollback capability. Relying on immediate production deployment offers no safe mechanism to undo changes, logging alone doesn’t provide a practical way to revert, and decommissioning after a patch doesn’t address restoring full functionality.