Study. uk . com
  1. Home
  2. All questions
  3. Question 115

CompTIA Security+ study material · question 115 of 611

An organisation treats every patch cycle as an emergency and never plans capacity for it. Which framing does NIST recommend instead?

  1. Patching as preventive maintenance
  2. Patching as a procurement function
  3. Patching as an incident response activity
  4. Patching as a compliance obligation
Show the answer

Answer: A. Patching as preventive maintenance

Framing patching as routine maintenance is what lets it be scheduled, resourced and measured rather than improvised.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 1.1 Purpose and Scope

Challenge yourself on this topic → Study as cards