100-160 Question 142
Select 3A company has recently discovered a critical vulnerability in one of its enterprise applications. As a cybersecurity technician, you are tasked with ensuring the system is secured. Which of the following actions should you take to implement the necessary updates while minimizing potential risks?
- A
Verify the availability of the latest patch from the vendor and review release notes for known issues.
- B
Immediately apply the patch to all production systems without prior testing to ensure rapid deployment.
- C
Test the patch in a staging or sandbox environment before deploying it to production systems.
- D
Schedule the update during a maintenance window to minimize disruption to business operations.
- E
Disable all system firewalls to allow the patch to install without interference.
Show answer and explanation
Correct answers: A, C, D
Explanation
Implementing software updates in a secure manner involves verifying the patch, testing it in a controlled environment, and scheduling deployment during a maintenance window. These steps help minimize risks such as system downtime, compatibility issues, or disruptions to business operations, while ensuring the vulnerability is effectively mitigated.
- A. Correct.
Verifying the availability of the latest patch and reviewing release notes helps ensure the update addresses the vulnerability and identifies any potential issues or side effects.
- B. Incorrect.
Applying the patch immediately without prior testing can lead to unanticipated problems or system downtime, which is not a best practice in cybersecurity.
- C. Correct.
Testing the patch in a staging or sandbox environment ensures that compatibility and functionality are verified before deploying to production systems.
- D. Correct.
Scheduling the update during a maintenance window minimizes disruption to business operations and ensures the update is applied in a controlled environment.
- E. Incorrect.
Disabling firewalls is not a recommended practice as it exposes the system to additional security risks and is unnecessary for most update processes.