Study. uk . com
  1. Home
  2. All questions
  3. Question 418

CompTIA Security+ study material · question 418 of 611

A patch programme covers operating systems and applications but not firmware. What is the consequence?

  1. Firmware flaws are covered by the operating system patch
  2. Firmware updates are the vendor's legal responsibility
  3. Firmware cannot be exploited remotely
  4. Devices stay vulnerable at a layer beneath everything the programme touches
Show the answer

Answer: D. Devices stay vulnerable at a layer beneath everything the programme touches

Patch planning applies to every patchable layer, and firmware sits below the software the programme manages.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 1.1 Purpose and Scope

Challenge yourself on this topic → Study as cards