CompTIA Server+ (SK0-005)Server AdministrationMedium
A server administrator is tasked with ensuring that all server operating systems are kept up-to-date with the latest security patches and bug fixes. The company operates a mix of Windows and Linux servers, and downtime must be minimized. Which strategy provides a structured approach to manage and deploy updates across this diverse environment?
- ADisable automatic updates to prevent unexpected reboots and issues.
- BOnly apply critical security patches once a year.
- CImplement a centralized patch management system (e.g., WSUS, Satellite).
- DManually download and install patches on each server during off-peak hours.
Show answer & explanationAnswer & explanation
Correct answer: C. Implement a centralized patch management system (e.g., WSUS, Satellite).
A centralized patch management system allows administrators to approve, deploy, and report on updates across a large and diverse server fleet (Windows and Linux) from a single console. This ensures consistency, reduces manual effort, and helps minimize downtime through scheduled deployments and testing.
Why the other options are wrong
- A. Disabling automatic updates without an alternative strategy leaves servers vulnerable and does not address the need for keeping systems up-to-date.
- B. Applying critical security patches only once a year leaves systems exposed to known vulnerabilities for extended periods, which is a significant security risk.
- D. Manually installing patches on each server is time-consuming, prone to errors, and not scalable for a mixed environment.
Patch Management System
A set of processes and tools used to identify, acquire, test, and deploy software updates (patches) to maintain consistency, security, and stability across an organization's systems.
- Automates patch deployment.
- Ensures compliance and security.
- Reduces manual effort and errors.
Memory trick: Centralized Control, Consistent Code