100-160 Question 145
Single answerA system administrator notices that a critical security patch for a widely-used software application has been released. However, applying the update immediately could interrupt business operations. Which is the BEST course of action the administrator should take in this scenario?
- A
Immediately apply the update to all systems to prevent potential exploitation.
- B
Test the update in a controlled environment before deploying it to production systems.
- C
Wait until a cyberattack exploiting the vulnerability occurs before applying the update.
- D
Disable the affected software until the update can be applied.
Show answer and explanation
Correct answer: B
Explanation
The best practice for implementing software updates, especially for critical security patches, is to test them in a controlled environment. This ensures that the update does not introduce new issues or disrupt existing workflows. Once validated, the update can be safely deployed to production systems. This approach balances security and operational stability.
- A. Incorrect.
Immediately applying the update may prevent exploitation, but it could cause disruptions or conflicts in the production environment if not tested beforehand.
- B. Correct.
Testing the update in a controlled environment ensures compatibility and helps identify potential issues before applying it to production systems, minimizing risks to business operations.
- C. Incorrect.
Waiting for a cyberattack before applying the update is an ineffective and high-risk approach, as it leaves the system vulnerable unnecessarily.
- D. Incorrect.
Disabling the affected software could severely impact business operations and is not a practical solution unless absolutely necessary.