What policy change would ensure servers are updated with the latest patches at regular intervals?

• A. Establish a plan to update / test the latest patches at regular intervals.
• B. Patch only after a breach.
• C. Never patch.
• D. Patch only on servers with high CPU.

Answer: (A)

This question is about setting up a proactive patch management policy. The best approach is to establish a plan to update and test the latest patches at regular intervals. Having a formal schedule creates a predictable, repeatable process that keeps servers protected without waiting for a problem to occur. Regular testing before deployment helps catch compatibility issues or unintended side effects, so updates don’t disrupt services and you can roll back if needed. This approach reduces the window of vulnerability and ensures uniform coverage across the server fleet.

Patching only after a breach is reactive and leaves a gap where attackers can exploit known flaws. Never patch leaves systems exposed to known vulnerabilities. Patching only on servers with high CPU is inconsistent and neglects other systems that may be just as vulnerable, creating uneven security across the environment.