Question

Difficulty: EasyPatch and Configuration Management

A security analyst is preparing to roll out a critical operating system update across an enterprise environment. To minimize operational risk and prevent application incompatibility during deployment, which of the following actions should be performed FIRST?

  1. A
    Deploy the update directly to primary production servers during peak business hours.
  2. Test the update in a representative non-production staging environment.Answer
  3. C
    Modify perimeter firewall rules to block inbound traffic from external patch repositories.
  4. D
    Disable host-based logging services on target servers to speed up installation.

Answer

Testing the update in a representative non-production staging environment.
Testing patches in a representative staging environment ensures that potential software conflicts, performance issues, or system crashes are identified and resolved before updates are introduced into live operational environments.

Step-by-Step Solution

1
Identify the primary goal of patch management testing controls.
Recognize that software patches must be validated prior to broad deployment to avoid unexpected downtime.
Unvalidated patches may introduce bugs or break critical dependencies.
2
Determine the appropriate initial environment for patch execution.
Select a isolated staging or sandbox environment that mirrors production configurations.
Staging testing confirms stability and application compatibility safely before production rollout.

Key Concept

Patch Testing and Staging Environment Validation
Estimated Time:1m 0s
Rate this question