SY0-301 Question #139: Real Exam Question with Answer & Explanation

The correct answer is A: Configuration management. Application patch management is a component of configuration management, which governs the process of maintaining known, controlled, and updated states for all system components. The other options are unrelated to patch tracking and deployment.

Question

Which of the following encompasses application patch management?

Options

AConfiguration management
BPolicy management
CCross-site request forgery
DFuzzing

Explanation

Application patch management is a component of configuration management, which governs the process of maintaining known, controlled, and updated states for all system components. The other options are unrelated to patch tracking and deployment.

Common mistakes.

B. Policy management deals with the creation, distribution, and enforcement of organizational security policies and does not involve the technical process of applying software patches.
C. Cross-site request forgery (CSRF) is a web application attack where unauthorized commands are sent from a trusted user, and it has no relationship to patch management.
D. Fuzzing is a dynamic testing technique that sends malformed or random input to applications to discover vulnerabilities - it is a testing methodology, not a patch management process.

Concept tested. Patch management as a subset of configuration management

Reference. https://learn.microsoft.com/en-us/windows/deployment/update/waas-overview

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice