Study. uk . com
  1. Home
  2. All questions
  3. Question 116

CompTIA Security+ study material · question 116 of 611

An enterprise patch strategy currently covers only servers and workstations. Which two asset classes must also be included? Choose two.

  1. Paper records held in archive
  2. Operational technology and Internet-of-Things devices
  3. Third-party contract documents
  4. Device firmware
Show the answer

Answer: B. Operational technology and Internet-of-Things devices
D. Device firmware

Patch planning applies to all computing technology assets and to every patchable layer, firmware included.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 1.1 Purpose and Scope

Challenge yourself on this topic → Study as cards