Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C is correct: C. Validation: After a software patch has been applied to a system, the immediately following step in the vulnerability remediation lifecycle is validation. This process confirms that the patch successfully resolved the target vulnerability, verifies that it was deployed properly, and ensures it did not cause any unexpected adverse effects or system degradation. A. Testing: Testing typically happens before a patch is fully deployed into production. Technicians test patches in a sandbox or non-production environment to verify functionality and check for compatibility issues before final installation
After applying a patch, the next step is to test the system to ensure the patch works as intended and does not introduce new issues. Testing must occur before validation, because you need to confirm functionality and stability prior to formally verifying that the vulnerability has been fully remediated.
I don't get the logic of applying a patch and then testing it....you don't apply untested patches (use a sandbox/identical dev system to production) and then you'll know it works in production server when applied....validating that it works in prod server is called "validation".