SY0-701 · Question #630
Which of the following describes the most effective way to address OS vulnerabilities after they are identified?
The correct answer is D. Patching. Patching directly addresses identified OS vulnerabilities by applying vendor-supplied fixes that close the specific security gaps - it's the most targeted and effective remediation method once a vulnerability is known. Why the distractors fall short: A. Endpoint protection (antiv
Question
Which of the following describes the most effective way to address OS vulnerabilities after they are identified?
Options
- AEndpoint protection
- BRemoval of unnecessary software
- CConfiguration enforcement
- DPatching
How the community answered
(27 responses)- A4% (1)
- C4% (1)
- D93% (25)
Explanation
Patching directly addresses identified OS vulnerabilities by applying vendor-supplied fixes that close the specific security gaps - it's the most targeted and effective remediation method once a vulnerability is known.
Why the distractors fall short:
- A. Endpoint protection (antivirus/EDR) can detect and block exploit attempts but doesn't fix the underlying vulnerability itself.
- B. Removal of unnecessary software reduces attack surface and is good hygiene, but it doesn't remediate vulnerabilities in software you still need.
- C. Configuration enforcement hardens systems against misconfiguration-based risks but cannot fix a code-level vulnerability in the OS.
Memory tip: Think of it as a wound - endpoint protection is a bandage, configuration enforcement is protective gear, and removing software avoids injury altogether. But if you're already cut, only a patch (suture) actually closes the wound.
Topics
Community Discussion
No community discussion yet for this question.