nerdexam
CompTIA

CV0-003 · Question #239

The CSA needs to install a patch on 58 virtual server instances during the Friday evening maintenance window. Which of the following is the MOST efficient way to get the patches installed?

The correct answer is A. Use the patch management tool to automate and orchestrate the patch installation. Patch management tools are designed to automate and orchestrate large-scale patching across many systems simultaneously, making them the most efficient approach for 58 instances.

Operations and Support

Question

The CSA needs to install a patch on 58 virtual server instances during the Friday evening maintenance window. Which of the following is the MOST efficient way to get the patches installed?

Options

  • AUse the patch management tool to automate and orchestrate the patch installation.
  • BUse a security vulnerability scanning tool to apply the patch automatically.
  • CSchedule the patch to install from a remote file server upon server reboot.
  • DConnect the server instances to the Internet to download the patch automatically.

How the community answered

(26 responses)
  • A
    92% (24)
  • B
    4% (1)
  • C
    4% (1)

Why each option

Patch management tools are designed to automate and orchestrate large-scale patching across many systems simultaneously, making them the most efficient approach for 58 instances.

AUse the patch management tool to automate and orchestrate the patch installation.Correct

Patch management tools provide centralized automation and orchestration capabilities that allow an administrator to deploy patches to all 58 instances simultaneously in a single coordinated workflow, minimizing manual effort and maintenance window time.

BUse a security vulnerability scanning tool to apply the patch automatically.

Vulnerability scanning tools are designed to identify and report security weaknesses, not to deploy or apply patches to systems.

CSchedule the patch to install from a remote file server upon server reboot.

Scheduling patches from a remote file server on reboot lacks centralized orchestration and requires individual server configuration, making it far less efficient at scale.

DConnect the server instances to the Internet to download the patch automatically.

Connecting production server instances directly to the Internet to pull patches introduces significant security risks and provides no centralized control or orchestration.

Concept tested: Automated patch management at scale

Source: https://learn.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wsus

Topics

#patch management#automation#orchestration#virtual server patching

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice