A security administrator needs to update the OS on all the switches in the company. Which of the following
MUST be done before any actual switch configuration is performed?

A.
The request needs to be sent to the incident management team.

B.
The request needs to be approved through the incident management process.

C.
The request needs to be approved through the change management process.

D.
The request needs to be sent to the change management team.

Explanation:
Change Management is a risk mitigation approach and refers to the structured approach that is followed to
secure a company’s assets. Thus, the actual switch configuration should first be subject to the change
management approval.