2.6 Determine Patching Recommendations, Given a Scenario 350-201 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company's point-of-sale (POS) system runs on a custom Linux distribution that is no longer supported. A critical vulnerability is discovered in the kernel, but the POS system cannot be rebooted during store hours. What is the BEST recommendation?

   • AReboot the POS system immediately to apply the kernel patch
   • BApply a kernel live patch that does not require a reboot, and schedule a full upgrade during the next store closure
   • CUpgrade the entire operating system during store hours
   • DDisable the POS system until the kernel is upgraded
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   An organization has a strict change management policy that requires a 2-week testing period for all patches. A critical vulnerability is announced with an active exploit, and the vendor provides an emergency patch. The patch is known to cause issues with a legacy application, but the legacy application is not used during the weekend. What should the organization do?

   • ASkip the patch and rely on network segmentation to mitigate the exploit.
   • BAccelerate testing by focusing on the legacy application and deploy the patch during the weekend when the legacy app is not used.
   • CDeploy the patch immediately to all systems, ignoring the 2-week testing period, because the exploit is active.
   • DWait the full 2-week testing period to comply with policy, even though the exploit is active.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security analyst is reviewing a vulnerability report that lists a specific version of a network device firmware as vulnerable to a denial-of-service (DoS) attack. The device is in a production environment and cannot be taken offline during business hours. What should the analyst do first?

   • ADisable the device's network interfaces to prevent the DoS attack, even though it causes downtime.
   • BConfirm the exact firmware version running on the device and check if the vendor has released a patched version.
   • CImmediately download the latest firmware and install it during business hours to mitigate the DoS risk.
   • DAssume the device is vulnerable and replace it with a new model that is not affected.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   A security patch is available for a legacy application that runs on a server that must remain available 24/7. The patch requires a reboot. What should the administrator consider when recommending a patching approach?

   • AThe patch should be skipped because the server is legacy
   • BThe need for a maintenance window to minimize downtime
   • CThe patch should be applied only if it does not require a reboot
   • DThe patch should be applied immediately without regard to downtime
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   After applying a critical security patch to a Linux server, the administrator wants to confirm that the patch was installed correctly and that the vulnerability is mitigated. Which action should the administrator take?

   • AReboot the server and assume the patch is effective because the reboot completed successfully.
   • BDisable the vulnerable service to reduce exposure, and consider the patch applied.
   • CReview the vendor's release notes to confirm the patch addresses the vulnerability, without checking the server.
   • DCheck the package manager logs to confirm the patch is installed and then run a vulnerability scan against the server.
   Reveal Solution Discussion Select an answer first