CompTIA CySA+ Cybersecurity Analyst Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C is correct: C. Validation: After a software patch has been applied to a system, the immediately following step in the vulnerability remediation lifecycle is validation. This process confirms that the patch successfully resolved the target vulnerability, verifies that it was deployed properly, and ensures it did not cause any unexpected adverse effects or system degradation. A. Testing: Testing typically happens before a patch is fully deployed into production. Technicians test patches in a sandbox or non-production environment to verify functionality and check for compatibility issues before final installation

• Chose A2

  After applying a patch, the next step is to test the system to ensure the patch works as intended and does not introduce new issues. Testing must occur before validation, because you need to confirm functionality and stability prior to formally verifying that the vulnerability has been fully remediated.

• 1

  I don't get the logic of applying a patch and then testing it....you don't apply untested patches (use a sandbox/identical dev system to production) and then you'll know it works in production server when applied....validating that it works in prod server is called "validation".