Which metric is commonly used to measure the effectiveness of patch management?

Amount of network bandwidth used

Percentage of systems patched within a defined timeframe

A security analyst is using a vulnerability scanner to assess a network. The scanner reports a high number of false positives. Which technique would most likely reduce false positives?

Perform an authenticated scan with valid credentials.

Increase the scan intensity to check more ports and services.

Run the scan during off-peak hours to avoid network congestion.

Use a different scanner that is known to be faster.

What is a key benefit of using a formal change management process for patch deployment?

It eliminates the need for patch testing

It removes the need for documentation

It provides a rollback plan in case the patch causes issues

It guarantees the patch will not fail

Certified Information Systems Security Professional

Domain 7Objective 8

7.8 - Implement and Support Patch and Vulnerability Management CISSP Practice Questions (Page 1)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

9concepts

13%of the exam

Questions 1–5

1foundation · easy
Which metric is commonly used to measure the effectiveness of patch management?
Select an answer first
2foundation · easy
Which patch deployment strategy involves applying a patch to a small group of systems first, then gradually expanding to the rest of the environment?
Select an answer first
3application · medium
A security analyst is using a vulnerability scanner to assess a network. The scanner reports a high number of false positives. Which technique would most likely reduce false positives?
Select an answer first
4foundation · easy
What is a key benefit of using a formal change management process for patch deployment?
Select an answer first
5foundation · easy
In the vulnerability management lifecycle, which phase involves assigning a severity rating to a discovered vulnerability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

7.8 - Implement and Support Patch and Vulnerability Management CISSP Practice Questions (Page 1)

Questions 1–5

Which metric is commonly used to measure the effectiveness of patch management?

Which patch deployment strategy involves applying a patch to a small group of systems first, then gradually expanding to the rest of the environment?

A security analyst is using a vulnerability scanner to assess a network. The scanner reports a high number of false positives. Which technique would most likely reduce false positives?

What is a key benefit of using a formal change management process for patch deployment?

In the vulnerability management lifecycle, which phase involves assigning a severity rating to a discovered vulnerability?

Keep studying — Security Operations