Study. uk . com
  1. Home
  2. All questions
  3. Question 585

CompTIA Security+ study material · question 585 of 611

A device cannot follow the standard patching plan. What keeps it visible and owned?

  1. Removing it from the vulnerability scan scope
  2. A documented exception to the maintenance plan
  3. Lowering its asset criticality rating
  4. Reassigning it to the network team
Show the answer

Answer: B. A documented exception to the maintenance plan

An undocumented deviation simply disappears from the programme; a recorded exception keeps an owner attached to it.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 3.5.5 Exceptions to Maintenance Plans

Challenge yourself on this topic → Study as cards