ISC2 Certified in Cybersecurity (CC) Practice Question

Patches are narrowly focused pieces of code released by a vendor to correct specific flaws-most often security vulnerabilities or stability bugs-found in an existing software version. Their goal is to eliminate the weakness without otherwise altering functionality. A general software update, by contrast, typically delivers new or enhanced features, performance improvements, or other broad changes and may include multiple patches bundled together. Therefore, the option describing a patch as a fix for particular vulnerabilities or defects is correct, while the other statements reflect characteristics of feature-adding updates, driver refreshes, or full version upgrades, not the limited, corrective nature of patches.