The Cruel Information Security Officer (CISO) asks a security analyst to install an OS update to a production VM that has a 99% uptime SL

The highest priority in this scenario is mitigating the risk of downtime to protect the 99% uptime Service Level Agreement (SLA). Taking a snapshot of the Virtual Machine (VM) is the most effective first step. A snapshot captures the VM's current state, including its disk, memory, and configuration. This creates a point-in-time recovery point that allows for a near-instantaneous rollback if the OS update causes any issues. This method is significantly faster than restoring from a backup, directly addressing both the high-availability requirement of the SLA and the CISO's request for a quick process by minimizing potential remediation time.

A. A health check is a prudent step before making changes, but it does not provide a recovery mechanism if the patch itself introduces instability.

B. Installing the patch immediately without a rollback plan is reckless, as it exposes the critical production system to unnecessary risk of extended downtime, violating the SLA.

C. While confirming backups is a good general practice, restoring from a backup is a disaster recovery process, not a rapid rollback solution, and would likely cause significant downtime.

1. VMware

Inc. (2023). vSphere Virtual Machine Administration Guide (vSphere 8.0). In the section "Managing Virtual Machine Snapshots

" the documentation states

"Take a snapshot when you are about to perform an operation that is not easily reversed

such as upgrading the guest operating system or installing new software." (Section: "Take a Snapshot of a Virtual Machine").

2. Microsoft Corporation. (2023

September 21). Create a checkpoint to revert a VM to a previous state. Microsoft Learn. The documentation advises

"Checkpoints are a 'point-in-time' image of a virtual machine... You can use them to revert a virtual machine to a previous state. This can be useful before you make software configuration changes

apply a software update

or install new software." (Section: "When to use checkpoints").

3. National Institute of Standards and Technology (NIST). (2022). SP 800-40 Rev. 4

Guide to Enterprise Patch Management Planning. In Section 3.3

"Patch Installation

Testing

and Deployment

" the guide emphasizes the importance of remediation planning

stating

"Organizations should have a rollback or back-out plan for each patch deployment in case the deployment fails or causes unintended problems." A VM snapshot is the standard

most efficient rollback mechanism in a virtualized environment.