Study. uk . com
  1. Home
  2. All questions
  3. Question 110

CompTIA Security+ study material · question 110 of 611

A hospital's imaging system vendor requires that updates be applied only on its certified schedule. An engineer wants to patch immediately. What is the risk of doing so?

  1. The change will bypass the asset inventory
  2. The device's CVSS score will increase
  3. The warranty may be voided and future support forfeited
  4. The patch will not install outside the vendor's window
Show the answer

Answer: C. The warranty may be voided and future support forfeited

In safety-regulated sectors the manufacturer's certification schedule is a contractual condition, not just advice.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 2.1 Risk Responses

Challenge yourself on this topic → Study as cards