Practice question 22 of 498 · hard
A critical server has an actively exploited vulnerability, but its vendor requires a compatibility fix before the patch can be installed safely. What is the best interim design?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Apply a governed temporary exception, restrict reachable attack paths, and accelerate an approved remediation plan
Apply a governed temporary exception, restrict reachable attack paths, and accelerate an approved remediation plan: This balances exploitation risk with service safety while retaining ownership and a deadline. Exclude the server permanently from compliance reporting: Hiding the exception removes visibility without reducing risk. Install the patch blindly despite a known unacceptable failure: Ignoring the verified dependency can create a damaging outage. Assume endpoint monitoring has repaired the vulnerable code: Monitoring can detect attacks but does not remove the underlying weakness.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.