Soru

Zorluk: OrtaPatch and Configuration Management

A security analyst is establishing a patch and configuration management procedure for an air-gapped Industrial Control System (ICS) network following the disclosure of a critical firmware vulnerability. Which of the following technical controls and procedural steps should the analyst execute to ensure safe patch deployment and maintain system baselines? (Select TWO.)

  1. Validate patches in an isolated staging environment using offline installation media verified with cryptographic hashes prior to deployment.Cevap
  2. B
    Deploy perimeter firewalls as a corrective security control to substitute for performing software and firmware updates on vulnerable devices.
  3. Archive verified offline baseline configuration backups and maintain documented roll-back plans for all managed controllers before executing updates.Cevap
  4. D
    Configure continuous cloud-based automated configuration remediation agents to dynamically pull vendor patches over public networks.

Cevap

The correct procedures are validating patches in an isolated staging environment using cryptographically verified offline media, and archiving verified offline baseline configuration backups with documented roll-back plans prior to update execution.
In air-gapped industrial environments, patch and configuration management requires verifying file integrity via cryptographic hashes, testing updates in a staging environment prior to production release, and securing baseline configurations with tested roll-back mechanisms to ensure high availability and prevent unexpected system outages.

Adım Adım Çözüm

1
Analyze environment constraints and patch management prerequisites for specialized networks.
Identified that an air-gapped ICS network cannot rely on direct internet connectivity or unverified media.
Air-gapped systems require offline patch distribution mechanisms with strong integrity verification.
2
Select appropriate staging, verification, and roll-back controls.
Offline hash verification in a mirror environment combined with baseline configuration archiving ensures safe deployment and rapid restoration if instability occurs.
Pre-deployment testing mitigates operational disruption, and baseline backups enable roll-back during unexpected configuration drift.

Anahtar Kavram

Air-gapped Patch and Configuration Management Lifecycle
Bu soruyu puanla