An organization relies heavily on an application that has a high frequency of security updates. At present, the
security team only updates the application on the first Monday of each month, even though the security updates
are released as often as twice a week. Which of the following would be the BEST method of updating this
application?
A.
Configure testing and automate patch management for the application.
B.
Configure security control testing for the application.
C.
Manually apply updates for the application when they are released.
D.
Configure a sandbox for testing patches before the scheduled monthly update.
Why A and not D? Is it because of the high frequency?
A key word here is a high frequency of security updates. If the security updates are not frequent as it says, having a sandbox or virtualized environment to test and pushing out might be the right answer but because of the high frequency of the security updates, I am sure A is the correct answer.