2.6 Determine Patching Recommendations, Given a Scenario 350-201 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   An organization has a change management policy that requires all patches to be tested in a staging environment before production deployment. A critical zero-day vulnerability is announced, and the vendor provides an emergency patch. What should the organization do?

   • AFollow the standard testing process, even if it delays the patch deployment.
   • BAccelerate the testing process by testing on a small set of production-like systems, then deploy if no issues are found.
   • CDeploy the emergency patch directly to production because it is a zero-day and time is critical.
   • DSkip the patch entirely and rely on other security controls to mitigate the zero-day.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security analyst is reviewing two vulnerabilities: CVE-2021-44228 (Log4Shell) in a public-facing Java application and CVE-2022-22965 (Spring4Shell) in an internal customer portal. Both are critical, but the Log4Shell application is internet-exposed, while the Spring4Shell portal is only accessible from the internal network. Which patch should be prioritized?

   • APatch both simultaneously during the next maintenance window
   • BPatch Log4Shell first because the application is internet-exposed
   • CPatch Spring4Shell first because it affects a customer portal
   • DPatch Spring4Shell first because it is a newer vulnerability
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   A patch has been applied to a critical application. What should be done to ensure the patch did not introduce new issues?

   • ACheck the system logs for any error messages
   • BVerify that the patch file is still present on the server
   • CConfirm that the server's clock is synchronized
   • DRun functional tests on the application to ensure it operates correctly
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   After patching a web server, the administrator notices that the server's performance has degraded significantly. The patch was supposed to fix a security vulnerability, but the performance issue is new. What should the administrator do?

   • ALeave the patch in place and accept the performance degradation, since security is more important.
   • BReboot the server to see if performance improves, without further investigation.
   • CDisable the security feature that the patch enabled, to improve performance.
   • DRoll back the patch and report the performance issue to the vendor, then plan a re-application after further testing.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   A patch management policy requires that all patches be deployed in a controlled manner. Which practice is part of a safe patch deployment process?

   • ASchedule the patch deployment during a maintenance window and have a rollback plan
   • BApply the patch without a rollback plan to save time
   • CSkip testing if the patch is from a trusted vendor
   • DDeploy the patch to all systems at once to ensure consistency
   Reveal Solution Discussion Select an answer first