100-160 Question 144
Select 3A cybersecurity technician is tasked with ensuring that all company endpoints are protected from known vulnerabilities. The technician notices that several systems are running outdated versions of their operating systems and antivirus software. What steps should the technician prioritize to mitigate this security risk?
- A
Schedule and apply operating system updates during the next maintenance window.
- B
Immediately update the antivirus software definitions on all affected systems.
- C
Disable automatic updates to prevent unexpected changes to the systems.
- D
Ignore the outdated systems since there are no known active threats targeting them.
- E
Verify compatibility of the updates with existing critical applications before deployment.
Show answer and explanation
Correct answers: A, B, E
Explanation
Implementing software and hardware updates is an essential component of maintaining a robust cybersecurity posture. Scheduling OS updates, ensuring antivirus software is current, and verifying compatibility with critical applications help mitigate risks effectively while maintaining operational stability. Neglecting updates or disabling automatic updates increases the likelihood of exploitation and introduces unnecessary risk to the organization.
- A. Correct.
Scheduling and applying operating system updates ensures that known vulnerabilities in the OS are patched, reducing the risk of exploitation.
- B. Correct.
Updating antivirus software definitions immediately protects against the latest known malware and threats, which is critical for endpoint security.
- C. Incorrect.
Disabling automatic updates is not recommended as it increases the risk of systems remaining unpatched and vulnerable to attacks.
- D. Incorrect.
Ignoring outdated systems is a negligent approach and leaves the organization exposed to potential threats.
- E. Correct.
Verifying compatibility of updates with existing critical applications ensures that the updates do not disrupt business operations, which is an essential part of the update process.