Which of the following would be the FIRST step to take when implementing a patch management program?

The correct answer is D. Create a system inventory. The first step to take when implementing a patch management program is to create a system inventory. A system inventory is a comprehensive list of all the hardware and software assets in the organization, such as servers, workstations, laptops, mobile devices, routers…

Submitted by sofia.br· Mar 5, 2026Security Operations

Question

Options

APerform automatic deployment of patches.
BMonitor for vulnerabilities and threats.
CPrioritize vulnerability remediation.
DCreate a system inventory.

How the community answered

(55 responses)

A
4% (2)
B
2% (1)
D
95% (52)

Explanation

The first step to take when implementing a patch management program is to create a system inventory. A system inventory is a comprehensive list of all the hardware and software assets in the organization, such as servers, workstations, laptops, mobile devices, routers, switches, firewalls, operating systems, applications, firmware, etc. A system inventory helps to identify the scope and complexity of the patch management program, as well as the current patch status and vulnerabilities of each asset. A system inventory also helps to prioritize and schedule patch deployment, monitor patch compliance, and report patch performance.

Topics

#patch management#asset inventory#vulnerability management

Community Discussion

No community discussion yet for this question.

Full CISSP Practice