A security team is scheduling vulnerability remediation and must patch a critical vulnerability on a production database server. Which vulnerability response practice should they follow to minimize service disruption?

Question

Accepted Answer

A. Schedule patching during a defined maintenance window and communicate with stakeholders in advance. Maintenance windows are a formal vulnerability response practice that allows patching to occur during low-impact periods with stakeholder communication to minimize business disruption. The CySA+ exam objectives explicitly list maintenance windows and stakeholder communication as part of vulnerability response. Patching without a window risks unplanned downtime; indefinite deferral increases risk.

A security team is scheduling vulnerability remediation and must patch a critical vulnerability on a production database server. Which vulnerability response practice should they follow to minimize service disruption?

Related Questions

Discussion