2.6 Determine Patching Recommendations, Given a Scenario 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   After applying a patch to a web application, the security team wants to confirm that the patch is effective and that the application is not broken. Which action BEST verifies patch effectiveness?

   • ACheck the application version and assume the patch is effective
   • BRun a vulnerability scan and perform a regression test on the application
   • CReview the patch release notes and trust the vendor
   • DConfirm that the application is accessible to users
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company has three critical vulnerabilities to patch: (1) a remote code execution in a public-facing web server, (2) a privilege escalation in an internal HR application, and (3) a denial-of-service in a non-critical internal tool. The web server is exposed to the internet, the HR application is only accessible internally, and the internal tool is used by a small team. Which patch should be applied FIRST?

   • AThe denial-of-service in the internal tool
   • BThe privilege escalation in the internal HR application
   • CAll three patches simultaneously during the next maintenance window
   • DThe remote code execution in the public-facing web server
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A patch is available for a critical vulnerability in a database server. The patch is known to be incompatible with the current version of the database management system. What should the administrator do first?

   • AApply the patch anyway and hope it works
   • BIgnore the vulnerability because the patch is incompatible
   • CCheck if a compatible patch or workaround is available
   • DUninstall the database and reinstall it with the patch
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company operates a hybrid environment with a public-facing web server and an internal database server. The web server has a critical vulnerability with an active exploit in the wild, but the patch requires a reboot that will cause a 10-minute outage. The database server has a high-severity vulnerability with no known exploit, and its patch requires a reboot that will cause a 2-hour outage because of data migration. The web server is business-critical and cannot be down during peak hours, while the database server can be down during off-peak hours. What should the security team do?

   • APatch the web server immediately, accepting the 10-minute outage, and schedule the database patch for the next off-peak window.
   • BPatch the database server first because the outage is longer and needs more planning.
   • CDo not patch the web server because the outage would affect business, and instead implement a workaround.
   • DPatch both servers at the same time during the next off-peak window to minimize disruption.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has three servers with the following vulnerabilities: (1) a public-facing web server with a critical RCE, (2) an internal file server with a high-severity privilege escalation, and (3) a development server with a medium-severity DoS. The company has limited patching resources and can only patch one server this week. Which server should be patched FIRST?

   • AThe development server with the medium-severity DoS
   • BThe internal file server with the high-severity privilege escalation
   • CThe public-facing web server with the critical RCE
   • DPatch all three servers by working overtime
   Reveal Solution Discussion Select an answer first