CAS-003 · Question #608
Following the most recent patch deployment, a security engineer receives reports that the ERP application is no longer accessible. The security engineer reviews the situation and determines a…
The correct answer is B. Patch testing. The root cause of the outage was a patch applied directly to production without prior validation. The correct mitigation is to implement a formal patch testing process - applying patches to a staging or test environment that mirrors production before deploying to live systems…
Question
Following the most recent patch deployment, a security engineer receives reports that the ERP application is no longer accessible. The security engineer reviews the situation and determines a critical security patch that was applied to the ERP server is the cause. The patch is subsequently backed out. Which of the following security controls would be BEST to implement to mitigate the threat caused by the missing patch?
Options
- AAnti-malware
- BPatch testing
- CHIPS
- DVulnerability scanner
How the community answered
(26 responses)- A4% (1)
- B77% (20)
- C12% (3)
- D8% (2)
Explanation
The root cause of the outage was a patch applied directly to production without prior validation. The correct mitigation is to implement a formal patch testing process - applying patches to a staging or test environment that mirrors production before deploying to live systems. This catches compatibility issues (like the one that broke the ERP application) before they impact production. Anti-malware (A) protects against malware, not patch conflicts. HIPS (C) monitors for suspicious host behavior but wouldn't prevent a patch from breaking an application. A vulnerability scanner (D) identifies vulnerabilities but does not validate patch compatibility.
Topics
Community Discussion
No community discussion yet for this question.