nerdexam
CompTIA

SY0-301 · Question #891

A recently installed application update caused a vital application to crash during the middle of the workday. The application remained down until a previous version could be reinstalled on the server,

The correct answer is D. Application patch management. Application patch management is the formal process of evaluating, testing, approving, and deploying patches in a controlled manner before they reach production systems. Had a proper patch management process been followed, the update would have been tested in a non-production envi

Security operations

Question

A recently installed application update caused a vital application to crash during the middle of the workday. The application remained down until a previous version could be reinstalled on the server, and this resulted in a significant loss of data and revenue. Which of the following could BEST prevent this issue from occurring again?

Options

  • AApplication configuration baselines
  • BApplication hardening
  • CApplication access controls
  • DApplication patch management

How the community answered

(58 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    2% (1)
  • D
    91% (53)

Explanation

Application patch management is the formal process of evaluating, testing, approving, and deploying patches in a controlled manner before they reach production systems. Had a proper patch management process been followed, the update would have been tested in a non-production environment first, the issue would have been discovered before impact, and a rollback plan would have been in place. Application hardening reduces attack surface but does not govern the update lifecycle. Access controls limit who can use an application, not how updates are deployed. Configuration baselines document a known good state but do not define the process for safely applying updates.

Topics

#patch management#change management#application updates#availability

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice