CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ29

VerifiedSecurity Operations

A scan report identified multiple vulnerabilities affecting several mission-critical production servers. Attempts to install the patches in the development environment caused the servers to crash. What is the BEST course of action?

Explanation

When a patch cannot be safely deployed because it causes servers to fail, compensating controls are the appropriate interim risk treatment. Controls such as network segmentation, access restrictions, monitoring, or filtering can reduce exposure while a safe remediation is investigated.

Community Discussion

No comments yet. Be the first to start the discussion!