220-1102 Question 508
Single answerApplication updatesA small business uses several Windows 11 laptops for remote employees. After a recent security advisory, the IT technician must quickly reduce risk from a vulnerability in a commonly used third-party PDF application installed on all systems. The technician has limited time, and users cannot tolerate a full operating system upgrade during business hours. Which action is the BEST way to address the issue?
- A
Use the application's built-in update feature or the vendor's approved installer to deploy the latest application patch
- B
Run Windows Update so the third-party PDF application will be upgraded with the next cumulative OS update
- C
Perform a System Restore on each laptop to return the application to its original installation state
- D
Disable the PDF application in Task Manager so the vulnerability cannot be exploited
Show answer and explanation
Correct answer: A
Explanation
The best practice for application update scenarios on A+ Core 2 is to patch the affected application with the vendor-provided update rather than relying on unrelated OS maintenance tasks. In real environments, application vulnerabilities are commonly remediated through the application's built-in updater, an approved deployment package, or centralized software management tools. Microsoft documents Windows Update as the servicing mechanism for Windows and supported Microsoft components, while third-party software typically requires its own update path unless managed separately by enterprise tooling. System Restore and process termination do not constitute proper vulnerability remediation. The most direct, least disruptive, and most secure action is to deploy the latest vendor-approved application patch.
- A. Correct.
Correct. For a vulnerability in a third-party application, the best response is to update that application using its supported update mechanism or the vendor's current installer/package. This directly addresses the exposed software without requiring a full OS upgrade and aligns with standard patch-management practice: apply the vendor-released security update as soon as practical.
- B. Incorrect.
Incorrect. Windows Update primarily delivers Microsoft operating system, driver, and Microsoft product updates. It should not be relied on to patch an unrelated third-party PDF application unless that application is specifically managed through another enterprise tool. Choosing this option reflects the common misconception that all installed software is updated through the OS update process.
- C. Incorrect.
Incorrect. System Restore is designed to roll back certain system files, settings, drivers, and installed programs to a previous restore point. It is not an appropriate method for remediating a known application vulnerability, and restoring to an earlier state could leave the vulnerable version in place or reintroduce other outdated components.
- D. Incorrect.
Incorrect. Ending or disabling a process in Task Manager is not a software update strategy and does not remediate the underlying vulnerable code on disk. The application could be launched again later, and the organization would still remain exposed. This is only a temporary operational workaround at best, not the best fix.