200-201 Question 325
Select 3A cybersecurity analyst at your organization is tasked with ensuring that all systems are protected against newly discovered vulnerabilities. The analyst proposes creating a patch management policy. Which of the following should be included as part of the patch management process to effectively secure systems?
- A
Regularly monitoring for vendor updates and security advisories
- B
Automatically applying patches to all systems without testing
- C
Creating a test environment to validate patches before deployment
- D
Maintaining an inventory of all systems and their patch levels
- E
Disabling all services during patching to ensure security
Show answer and explanation
Correct answers: A, C, D
Explanation
Effective patch management involves a structured process that includes monitoring for updates, testing patches in a controlled environment, and maintaining an accurate inventory of systems and their patch levels. These steps ensure that vulnerabilities are addressed without causing unintended disruptions or compatibility issues.
- A. Correct.
Monitoring for vendor updates and security advisories is essential for staying informed about newly released patches and vulnerabilities.
- B. Incorrect.
Automatically applying patches to all systems without testing could lead to system instability or compatibility issues. Testing is critical before deployment.
- C. Correct.
Creating a test environment allows organizations to validate patches for compatibility and functionality before applying them to production systems.
- D. Correct.
Maintaining an inventory ensures that the organization knows which systems need patching and tracks their current patch levels.
- E. Incorrect.
Disabling all services during patching is unnecessary and can disrupt business operations. Patching can often be done without full service disruption.