220-1002 · Question #606
A technician is reviewing system updates. Some of the updates address vulnerabilities found in mission-critical servers, and they need to be performed immediately. Which of the following should the…
The correct answer is A. Risk analysis. Even when updates are urgent, a risk analysis should always be performed first. A risk analysis evaluates the potential consequences of both applying the patch (e.g., system instability, application incompatibility, downtime) and not applying it (e.g., exposure to the…
Question
A technician is reviewing system updates. Some of the updates address vulnerabilities found in mission-critical servers, and they need to be performed immediately. Which of the following should the technician perform FIRST?
Options
- ARisk analysis
- BBack-out plan
- CChange board
- DImplementation plan
How the community answered
(32 responses)- A81% (26)
- B6% (2)
- C3% (1)
- D9% (3)
Explanation
Even when updates are urgent, a risk analysis should always be performed first. A risk analysis evaluates the potential consequences of both applying the patch (e.g., system instability, application incompatibility, downtime) and not applying it (e.g., exposure to the vulnerability). This assessment informs all subsequent steps. Without it, a technician cannot make an informed decision about urgency, scheduling, or acceptable risk. A back-out plan is important but comes after risk analysis determines one is needed. The change board and implementation plan are also downstream steps that rely on the findings of the risk analysis. Skipping risk analysis on mission-critical servers could cause unplanned outages worse than the vulnerability itself.
Topics
Community Discussion
No community discussion yet for this question.