Information technology managers are often in a bind when a new exploit is discovered in the wild.They can respond by updating the affected software or hardware with new code provided by the manufacturer,which runs the risk that a flaw in the update will break the system.Or they can wait until the new code has been extensively tested,but that runs the risk that they will be compromised by the exploit during the testing period.Dealing with these issues is referred to as
A) change management.
B) hardening.
C) patch management.
D) defense in depth.

Question

Quizplus · Accepted Answer

The situation described in the passage relates to the management of software updates in response to a security exploit. This is typically referred to as patch management, where IT managers must decide when and how to apply software patches to address security vulnerabilities while also minimizing the risk of disrupting the overall system. Change management and hardening are related concepts but may not specifically address the case of patching software in response to a newly discovered vulnerability. Defense in depth refers to a broader security strategy that emphasizes multiple layers of protection to guard against different types of threats.

Information Technology Managers Are Often in a Bind When a New