A critical new security update has been released to fix an identified zero-day vulnerability with the SSH server process. Due to its severity, all development and staging servers must have this update applied immediately. Which of the following is the FASTEST way for the administrator to apply the patch and ensure all systems are configured consistently?

Question

Accepted Answer

D. Update the set of configuration management scripts to include the latest patch. Execute these Configuration management tools such as Ansible, Puppet, or Chef use scripts that can target an entire inventory of servers in parallel with a single execution, ensuring every system receives the identical patch and configuration state. This approach is faster than any manual method and eliminates human error or inconsistency across the fleet, which is critical for a zero-day SSH vulnerability requiring immediate remediation.

Answer

A. Shut down all servers and use the server provisioning tools to deploy new ones that have the Shutting down and reprovisioning all servers is a slow, disruptive process and introduces significant downtime far exceeding what a patch deployment requires.

Answer

B. Create a master inventory list of servers that must be patched. Log in to each server and deploy Manually logging in to each server sequentially is the slowest possible method and introduces inconsistency risk across the fleet.

Answer

C. Use the existing tooling to clone the existing servers. Update each clone with the latest patch and Cloning servers and updating the clones requires re-routing traffic and swap procedures, adding unnecessary steps and delay compared to patching in place.

A critical new security update has been released to fix an identified zero-day vulnerability with the SSH server process. Due to its severity, all development and staging servers must have this…

Question

Options

How the community answered

Why each option

Topics

Community Discussion