A financial enterprise operates a high-frequency trading platform with continuous uptime requirements. A vendor releases a critical security patch addressing an unauthenticated remote code execution flaw in the underlying operating system. The security team must address this threat across all host instances while ensuring system stability and compliance with strict service level agreement (SLA) commitments. Which of the following patch management strategies best balances rapid threat mitigation with continuous operational availability?
- Implement a canary deployment in a representative staging environment, validate stability through automated regression testing, and execute a phased rolling update across production nodes.Answer
- BBlock all external network traffic at the edge firewall targeting the affected service ports as a permanent alternative to applying host-level operating system updates.
- CPush the security patch to all production hosts simultaneously during peak traffic hours to minimize the duration of vulnerability exposure across the infrastructure.
- DDisable automated configuration baseline auditing across servers to allow system administrators to apply manual, unrecorded system modifications rapidly.
Answer
Implement a canary deployment in a representative staging environment, validate stability through automated regression testing, and execute a phased rolling update across production nodes.
Testing patches in a staging environment prior to initiating a canary release and rolling updates ensures software stability, verifies compatibility, and maintains high availability SLAs during patch deployment.
Step-by-Step Solution
Key Concept
Staged Patch Deployment and Rolling Update Strategies
Estimated Time:1m 30s