CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ258

VerifiedSecurity Operations

A security engineer has been assigned to work with the patch and vulnerability management group. Deployment of a newly approved patch is required. Research has been completed, and the security engineer has provided recommendations. Where should the patch be applied FIRST?

Explanation

Patches should be applied first in a lower, non-production environment to validate functionality and identify adverse effects before deployment to production or other operational systems. Microsoft guidance likewise recommends evaluating a deployment through a pilot before broad production rollout.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!