A security administrator is establishing standard operating procedures for system maintenance across enterprise servers. Which of the following actions should be performed prior to deploying software patches to live production servers? (Select TWO)
- Test updates in a non-production staging environment to verify system stability and software compatibilityAnswer
- Submit proposed updates for formal review and authorization through the change management processAnswer
- CDeploy patches directly to all production hosts simultaneously to eliminate vulnerability exposure immediately
- DDisable host intrusion prevention controls during deployment to prevent maintenance script execution failures
Answer
Testing updates in a non-production staging environment and submitting proposed updates through formal change management review.
A sound patch management policy requires testing software updates in a non-production staging environment to confirm system stability and software compatibility prior to live deployment. Additionally, submitting the proposed changes through a formal change management process ensures administrative oversight, scheduled maintenance windows, and verified rollback plans.
Step-by-Step Solution
Key Concept
Patch Management and Change Control Lifecycle