nerdexam
CompTIA

220-1202 · Question #240

A vendor normally releases security patches for its operating system on a monthly basis. An administrator receives an email from the vendor that says the vendor has published a patch for a zero-day…

The correct answer is D. Deploy the patch to a small number of computers in order to test it in a lab. Testing the zero-day patch on a limited set of systems first ensures it does not negatively impact the production environment before wider deployment.

Submitted by lukas.cz· Mar 30, 2026Operational Procedures

Question

A vendor normally releases security patches for its operating system on a monthly basis. An administrator receives an email from the vendor that says the vendor has published a patch for a zero-day flaw in its operating system outside of the normal patch schedule. Which of the following actions should the administrator take first in order to properly address this issue in a production environment?

Options

  • AWait until the next monthly patch is issued and deploy it with those updates.
  • BImmediately deploy the patch to all company-owned computers.
  • CDelay the patch deployment to not interfere with the production environment.
  • DDeploy the patch to a small number of computers in order to test it in a lab.

How the community answered

(56 responses)
  • A
    16% (9)
  • B
    5% (3)
  • C
    7% (4)
  • D
    71% (40)

Explanation

Testing the zero-day patch on a limited set of systems first ensures it does not negatively impact the production environment before wider deployment.

Topics

#Patch management#Zero-day vulnerability#Security updates#Testing procedures

Community Discussion

No community discussion yet for this question.

Full 220-1202 Practice