nerdexam
ExamsCAS-003Questions#391
CompTIA

CAS-003 · Question #391

CAS-003 Question #391: Real Exam Question with Answer & Explanation

The correct answer is B: The users did not reboot the computer after the patches were deployed.. Most Windows patches - especially security patches that replace kernel components, system DLLs, or core services - require a system reboot to fully take effect. Until the machine is rebooted, the previously loaded vulnerable code remains active in memory and the system is still e

Question

A systems administrator has deployed the latest patches for Windows-based machines. However, the users on the network are experiencing exploits from various threat actors, which the patches should have corrected. Which of the following is the MOST likely scenario?

Options

  • AThe machines were infected with malware.
  • BThe users did not reboot the computer after the patches were deployed.
  • CThe systems administrator used invalid credentials to deploy the patches.
  • DThe patches were deployed on non-Windows-based machines.

Explanation

Most Windows patches - especially security patches that replace kernel components, system DLLs, or core services - require a system reboot to fully take effect. Until the machine is rebooted, the previously loaded vulnerable code remains active in memory and the system is still exploitable. This is the most common and straightforward explanation for a patch deployment that appears successful but does not remediate vulnerabilities. Malware infection (A) is possible but would be a consequence, not the reason the patches aren't working. Deploying with invalid credentials (C) would cause the patch deployment to fail outright with errors, not silently succeed. Deploying on non-Windows machines (D) is not relevant, as the scenario specifies Windows machines.

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice