CV0-002 · Question #2
A critical new security update has been released to fix an identified zero-day vulnerability with the SSH server process. Due to its severity, all development and staging servers must have this…
The correct answer is D. Update the set of configuration management scripts to include the latest patch. Execute these. To apply a critical security patch rapidly and consistently across many development and staging servers, automated configuration management is the most effective approach. This method ensures uniformity and speed in patching operations.
Question
A critical new security update has been released to fix an identified zero-day vulnerability with the SSH server process. Due to its severity, all development and staging servers must have this update applied immediately. Which of the following is the FASTEST way for the administrator to apply the patch and ensure all systems are configured consistently?
Options
- AShut down all servers and use the server provisioning tools to deploy new ones that have the
- BCreate a master inventory list of servers that must be patched. Log in to each server and deploy
- CUse the existing tooling to clone the existing servers. Update each clone with the latest patch and
- DUpdate the set of configuration management scripts to include the latest patch. Execute these
How the community answered
(55 responses)- A11% (6)
- B4% (2)
- C7% (4)
- D78% (43)
Why each option
To apply a critical security patch rapidly and consistently across many development and staging servers, automated configuration management is the most effective approach. This method ensures uniformity and speed in patching operations.
Shutting down and redeploying servers is time-consuming due to provisioning overhead and data migration, making it less fast than patching existing systems.
Manually logging into each server to apply patches is slow, highly prone to human error, and makes consistent application difficult across many systems.
Cloning servers and then updating clones adds an unnecessary intermediate step and complexity when the goal is to immediately patch existing systems.
Configuration management tools automate the consistent deployment of configurations and updates across a fleet of servers efficiently. By updating the configuration scripts to include the latest patch and then executing them, the administrator can rapidly apply the fix to all targeted servers while ensuring consistency.
Concept tested: Automated configuration management for patching
Source: https://learn.microsoft.com/en-us/devops/operate/what-is-configuration-management
Topics
Community Discussion
No community discussion yet for this question.