Study. uk . com
  1. Home
  2. All questions
  3. Question 428

CISSP study material · question 428 of 500

Which four scenarios does NIST SP 800-40 Rev. 4 expect maintenance plans to cover?

  1. Development, test, staging and production environments.
  2. Routine patching, emergency patching, emergency mitigation, and unpatchable assets.
  3. Vendor-supported, community-supported, in-house and abandoned software.
  4. Servers, workstations, network devices and mobile devices.
Show the answer

Answer: B. Routine patching, emergency patching, emergency mitigation, and unpatchable assets.

SP 800-40 defines maintenance plans for four scenarios: routine patching, emergency patching, emergency mitigation, and assets that cannot be patched.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 > 3.5 Define Maintenance Plans for Each Maintenance Group

Challenge yourself on this topic → Study as cards