Study. uk . com
  1. Home
  2. All questions
  3. Question 425

CISSP study material · question 425 of 500

A monitoring dashboard shows a patch as installed but the vulnerability scanner still reports the flaw. Which explanation does NIST SP 800-40 Rev. 4 offer?

  1. An installed patch always takes effect immediately, so the scanner result must be a false positive.
  2. The scanner cannot detect patches applied outside a maintenance window.
  3. The patch was rolled back automatically after installation.
  4. The patch may need the software restarted, the platform rebooted, the application redeployed or a setting changed before it takes effect.
Show the answer

Answer: D. The patch may need the software restarted, the platform rebooted, the application redeployed or a setting changed before it takes effect.

SP 800-40 says making a patch take effect sometimes requires changes such as restarting the patched software, rebooting the platform, redeploying applications or altering configuration settings.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 > 2.3.2 Deploy the Patch

Challenge yourself on this topic → Study as cards