GSEC: GIAC Security Essentials

By GIAC · Question Mode

QuestionQ12

Endpoint Security

The prior system administrator at your company relied heavily on email lists—such as vendor lists and Bug Traq—to receive information about updates and patches. Although this is a useful way to obtain data, it takes time and effort to review it. To speed up the process, you decide to move to fully automated updates and patching. You configure your systems to automatically patch production servers using a cron job and a scripted apt-get upgrade command. Which of the following explains why you may want to avoid this plan?

Explanation

Applying automated patches directly to production without testing can introduce incompatible package changes, regressions, dependency issues, or service disruptions. Testing updates in a representative nonproduction environment helps identify unexpected behavior before deployment to production systems.

Community Discussion

No comments yet. Be the first to start the discussion!