Certified In Cybersecurity CC · Free Practice Question Easy
Question 29
A best practice of patch management is to:
-
A
Test patches before applying them
-
B
Apply patches according to the vendor's reputation
-
C
Apply patches every Wednesday
-
D
Apply all patches as quickly as possible
Reveal correct answer
Correct answer: A
Explanation
Patches sometimes disrupt a system's configurations and stability. One of the main challenges for security professionals is to ensure that patches are deployed as quickly as possible, while simultaneously ensuring the stability of running systems. To prevent flawed patches from negatively affecting running systems, it is good practice to test patches in a designated qualification environment before applying them to production systems (see ISC2 Study Guide, chapter 5, module 2 under Configuration Management Overview). Applying patches as quickly as possible is not a good practice. The vendor's reputation can be useful to know, but is not in itself sufficient to qualify the patch. Applying patches on fixed days also does not guarantee the stability of functioning systems after the patch is applied.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
