Question

Difficulty: EasyPatch and Configuration Management

A security administrator is establishing standard operating procedures for system maintenance across enterprise servers. Which of the following actions should be performed prior to deploying software patches to live production servers? (Select TWO)

  1. Test updates in a non-production staging environment to verify system stability and software compatibilityAnswer
  2. Submit proposed updates for formal review and authorization through the change management processAnswer
  3. C
    Deploy patches directly to all production hosts simultaneously to eliminate vulnerability exposure immediately
  4. D
    Disable host intrusion prevention controls during deployment to prevent maintenance script execution failures

Answer

Testing updates in a non-production staging environment and submitting proposed updates through formal change management review.
A sound patch management policy requires testing software updates in a non-production staging environment to confirm system stability and software compatibility prior to live deployment. Additionally, submitting the proposed changes through a formal change management process ensures administrative oversight, scheduled maintenance windows, and verified rollback plans.

Step-by-Step Solution

1
Analyze the patch management lifecycle requirements prior to production deployment.
Identified the need for technical verification and administrative risk governance.
Pre-deployment validation reduces the risk of operational disruption.
2
Evaluate technical pre-deployment procedures.
Staging environment testing verifies functional compatibility without risking live services.
Staging reflects production conditions while isolating potential patch defects.
3
Evaluate administrative governance controls.
Formal change management authorization provides proper approval, scheduling, and rollback planning.
Change control ensures organizational awareness and structured risk management.

Key Concept

Patch Management and Change Control Lifecycle
Rate this question