One of the IaaS production web servers has a critical OS vulnerability that requires remediation. The vulnerability report indicates it is a zero-day exploit. Which of the following is the BEST…

Scheduling a critical, zero-day exploit patch for the next standard window is too slow and leaves the production server vulnerable for an unacceptable period.

While building a new server might be part of a larger recovery plan, it is not the most direct or immediate way to remediate an existing vulnerability on a currently vulnerable production server.

Applying an update without testing, even in an emergency, risks introducing new problems or system instability, which can be just as detrimental as the original vulnerability.

A zero-day exploit on a production server is a critical security incident demanding rapid response to prevent compromise. Submitting an emergency change request to the Change Advisory Board (CAB) acknowledges the severity and bypasses standard change windows due to the immediate risk. Testing the patch is crucial even in emergencies to ensure it remediates the vulnerability without introducing new issues or impacting production services before deployment.