A company has a scheduled maintenance window every Sunday from 12:00 AM to 4:00 AM. However, an urgent vulnerability has been discovered on a critical server that requires patching to avoid an exploit. The server hosts essential services that are heavily used during business hours. Which of the following is the BEST course of action?
You selected this option
Patch the system without notifying stakeholders.
You selected this option
Notify stakeholders and proceed with the patching.
You selected this option
Notify stakeholders and escalate the issue for patching.
You selected this option
Patch the vulnerability during the next scheduled maintenance window.
In scenarios where urgent vulnerabilities need to be addressed outside of the regular maintenance window, it's important to follow a clearly defined exceptions process. Notifying stakeholders ensures that everyone is aware of the impending patch and its potential impacts. This also allows for any necessary precautions or adjustments to be made. Escalation ensures that higher management is aware and can approve the exception. Other answers neglect these critical steps which could lead to unmanaged risks or business disruptions.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an escalation process in IT?
Open an interactive chat with Bash
Why is stakeholder notification important during urgent situations?
Open an interactive chat with Bash
What are the risks of not following a defined exceptions process?