A utility company has a policy that requires all critical systems to be patched within 48 hours of a patch release. However, the company has experienced outages after applying patches to its legacy systems. The security team is considering updating the policy. What is the most important factor to consider?

The need to maintain a balance between timely patching and the operational impact on legacy systems.

The opinions of the system administrators who are responsible for patching.

The cost of replacing legacy systems that cannot be patched safely.

The regulatory requirements for patching critical infrastructure.

Dell NIST Cybersecurity Framework v2.0

Domain 2Objective 4

Establish Clear Policies and Procedures to Guide Cybersecurity Activities. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Part of the NIST Framework: GOVERN Function domain, which accounts for 18% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

21questions here

5free pages

4concepts

18%of the exam

Questions 21–21

21expert · hard
A utility company has a policy that requires all critical systems to be patched within 48 hours of a patch release. However, the company has experienced outages after applying patches to its legacy systems. The security team is considering updating the policy. What is the most important factor to consider?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.

Establish Clear Policies and Procedures to Guide Cybersecurity Activities. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Questions 21–21

Keep studying — NIST Framework: GOVERN Function