(ISC)2 Certified in Cybersecurity Practice Exam

An organization must always be prepared to do what when applying a patch?

1. Pay for the updated content

2. Buy a new system

3. Settle lawsuits

4. Rollback

The correct answer is: Rollback

When applying a patch, an organization must always be prepared to implement a rollback plan. This entails having a strategy in place for reverting to the previous software version if the newly applied patch causes any issues, such as unexpected system instability, performance degradation, or functionality problems. Rollbacks are critical because patches can sometimes introduce new vulnerabilities or conflicts that were not present in the previous version, negatively impacting the system or application. A well-prepared organization will have backup procedures and contingency plans that allow them to quickly restore the system to its prior state, minimizing downtime and operational disruption. In contrast, the other options do not represent typical requirements or preparations associated with applying a patch. For instance, paying for updated content is not always necessary; many patches are distributed for free by software vendors. Similarly, buying a new system is generally not a prerequisite for applying patches, as patches are typically meant to fix existing systems. Likewise, settling lawsuits is not a standard consideration when directly applying patches, although care must be taken to adhere to licensing agreements and ensure compliance with software usage policies.