Study. uk . com
  1. Home
  2. All questions
  3. Question 118

CompTIA Security+ study material · question 118 of 611

A flaw is being exploited in the wild and no patch exists yet. According to NIST's patch planning guidance, how should the organisation treat this?

  1. As an unplanned exception to the maintenance plan
  2. As an emergency mitigation scenario planned for in advance
  3. As a matter for the change advisory board alone
  4. As an automatic risk acceptance
Show the answer

Answer: B. As an emergency mitigation scenario planned for in advance

Emergency mitigation is one of the defined maintenance scenarios, so the organisation decides how it will act before it happens.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 3.5.3 Maintenance Plans for Emergency Mitigation

Challenge yourself on this topic → Study as cards