CompTIA Security+ (SY0-701)Security OperationsMedium
An organization requires that all vendor patches be deployed first to a staging environment that mirrors production, where they are validated for compatibility and stability before being pushed to live servers. Which phase of the patch management process does this describe?
- APrioritization
- BTesting
- CIdentification
- DDeployment
Show answer & explanationAnswer & explanation
Correct answer: B. Testing
The testing phase validates patches in a non-production environment to confirm they do not break functionality before wider rollout. Identification is discovering available patches, prioritization ranks them by risk, and deployment is the actual rollout to production—testing happens before deployment.
Why the other options are wrong
- A. Prioritization ranks which patches to apply first based on risk, not validation.
- C. Identification means discovering that a patch exists, not validating it.
- D. Deployment is pushing the patch to production, which occurs after testing.
Patch Management Testing Phase
The stage where patches are validated in a staging environment to confirm compatibility and stability before production deployment.
- Occurs after identification and prioritization
- Reduces risk of outages from bad patches
- Precedes full production deployment
Memory trick: A doctor tests medicine on a dummy patient before giving it to real ones.