Study. uk . com
  1. Home
  2. All questions
  3. Question 421

CISSP study material · question 421 of 500

An operations team downloads a vendor patch and installs it straight onto a test host. Which step does NIST SP 800-40 Rev. 4 say must come first, and why?

  1. Schedule the deployment through change management, since testing is itself a production change.
  2. Take a backup of the test host, since the patch may not be reversible.
  3. Validate the patch's authenticity and integrity, since it may come from a rogue source or have been tampered with in transit.
  4. Prioritise the patch against others, since the order determines the test plan.
Show the answer

Answer: C. Validate the patch's authenticity and integrity, since it may come from a rogue source or have been tampered with in transit.

Authenticity and integrity should be confirmed, preferably automatically, before testing or installation, since the patch may come from a rogue source or be tampered with.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 > 2.3.1 Prepare to Deploy the Patch

Challenge yourself on this topic → Study as cards