Implement Software and Hardware Updates 100-160 Practice Questions (Page 6)

Questions 26–28

1. 26application · medium

   A server's BIOS has a known vulnerability that could allow an attacker with physical access to bypass security. The server is running a critical database and cannot be taken offline for more than 15 minutes. The BIOS update process takes about 10 minutes and requires a reboot. What should you do?

   • AUpdate the server's operating system instead of the BIOS.
   • BSkip the update because the vulnerability requires physical access, which is unlikely.
   • CSchedule a maintenance window, back up the BIOS configuration, and apply the update during the 15-minute window.
   • DApply the update without a maintenance window because it only takes 10 minutes.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company has a critical server that runs a legacy application. The server's firmware is outdated and has a known vulnerability. The firmware update requires a reboot, but the legacy application cannot tolerate more than 5 minutes of downtime. The firmware update process takes 20 minutes. What is the best course of action?

   • AApply the firmware update during business hours without a maintenance window.
   • BSchedule a maintenance window and accept the 20-minute downtime because the vulnerability is critical.
   • CMove the legacy application to a virtual machine and then apply the firmware update to the host.
   • DDo not apply the firmware update because the application cannot tolerate the downtime.
   Reveal Solution Discussion Select an answer first
3. 28expert · hard

   A company has a group of Windows 10 devices that are used for a critical manufacturing process. The devices cannot be restarted during production hours (6 AM to 6 PM). A critical security update is released, and the IT team wants to deploy it as soon as possible. The update requires a restart. What is the best approach?

   • AConfigure the devices to download updates but not install them.
   • BSet Active Hours from 6 AM to 6 PM and allow Windows Update to install and restart outside those hours.
   • CDeploy the update and force a restart immediately, even during production hours.
   • DDo not deploy the update until the weekend, even if it is critical.
   Reveal Solution Discussion Select an answer first