Penetration on an assessment for a client organization, a penetration tester notices numerous outdated software package versions were installed ...s-critical servers. Which of the following would…

Question

Options

• AImplementation of patching and change control programs
• BRevision of client scripts used to perform system updates
• CRemedial training for the client's systems administrators
• DRefrainment from patching systems until quality assurance approves

• A
  80% (20)
• B
  4% (1)
• C
  12% (3)
• D
  4% (1)

Explanation

The best way to mitigate this issue is to implement patching and change control programs, which are processes that involve applying updates or fixes to software packages to address vulnerabilities, bugs, or performance issues, and managing or documenting the changes made to the software packages to ensure consistency, compatibility, and security. Patching and change control programs can help prevent or reduce the risk of attacks that exploit outdated software package versions, which may contain known or unknown vulnerabilities that can compromise the security or functionality of the systems or servers. Patching and change control programs can be implemented by using tools such as WSUS, which is a tool that can manage and distribute updates for Windows systems and applications, or Git, which is a tool that can track and control changes to source code or files.

No community discussion yet for this question.