CompTIA CySA+ CS0-003 Practice Question
You are preparing a vulnerability management report and must communicate the impact of remediating a newly discovered vulnerability that affects multiple critical systems. Remediation efforts could result in a temporary degradation of functionality for these systems. Which approach would be MOST effective for prioritizing the remediation actions without adversely impacting business operations?
Patch low-impact and non-critical systems first to minimize business operation disruptions, while deferring updates on critical systems indefinitely.
Delay all system updates until a comprehensive evaluation of the long-term impact on each system can be completed.
Force immediate but temporary updates on all systems simultaneously to ensure no system remains vulnerable, accepting the risk of degrading functionality.
Implement a staged rollout, beginning with less critical systems to monitor for functional degradation and incrementally advance to more critical systems.