Section 20.192 Updates and Patches

Question 1

Patch management can be

Manual

Answer 1

Rare for fully manual patch management these days

Question 2

Patch management can be

Automated

Answer 2

More reliable and most often used

○ Hackers can reverse engineer patches to find the underlying vulnerability

Question 3

Hotfix

Answer 3

A software patch that solves a security issue and should be applied immediately after being tested in a lab environment

Question 4

Update

Answer 4

■ Provides a system with additional functionality, but it doesn’t usually provide any

patching of security related issues
■ Often introduce new vulnerabilities

Question 5

Service Pack

Answer 5

Includes all the hotfixes and updates since the release of the operating system

Question 6

Effective Patch Management involves

Answer 6

■ Assigning a dedicated team to track vendor security patches

■ Establishing automated system-wide patching for OS and applications

■ Including cloud resources in patch management

■ Categorising patches as urgent, important, or non-critical for prioritisation

■ Create a test environment to verify critical patches before production deployment

■ Maintaining comprehensive patching logs for program evaluation and monitoring

■ Establishing a process for evaluating, testing, and deploying firmware updates

■ Developing a technical process for deploying approved urgent patches to
production

■ Periodically assessing non-critical patches for combined rollout