A critical security patch is required on a network load balancer in a public cloud. The organization has a major sales conference next week, and the Chief Executive Officer does not want any interruptions during the demonstration of an application behind the load balancer.
Which of the following approaches should the cloud security engineer take?
A. Ask the management team to delay the conference.
B. Apply the security patch after the event.
C. Ask the upper management team to approve an emergency patch window.
D. Apply the security patch immediately before the conference.
Explanation:
Given the critical nature of the patch and the upcoming major sales conference, the cloud security engineer should seek approval for an emergency patch window. This approach balances the need for security with the business requirement of no interruptions during the conference.
Reference: The strategy of managing critical updates in alignment with business operations is part of the governance and risk management topics in the CompTIA Cloud+ certification material.
