Exam CS0-002 topic 1 question 25 discussion

I had also picked A. D is a terrible answer. lmao

It should be B

Option D suggests implementing an automated solution to detect and deploy firmware updates immediately, which may introduce risks if updates are not properly evaluated or tested before deployment. I will go with A.

You NEVER immediately deploy updates without testing them. A is the only real answer.

Gotta go with A.

Which of the ((following best practices)) will help the organization to track and deploy trusted firmware updates as part of its vulnerability management programs? Based on the question it seems it's assuming that all of these are ((best practices)), but which one will "help the organization to track and deploy trusted firmware updates." This is why the answer is implement an automated solution. While I agree with most everybody else that we would test before pushing it to the production environment. This is what we do in our organization and test to ensure operational impact. The question seems to be testing detailed reading to throw one off from the answer they want.

A. "Best Practice" is key here. Best to implement after testing, else you risking bricking your gear. However, in the real world, sometimes you do not have a platform to test first.

It's D. The key verbiage here is "Trusted firmware".

"after proper testing." is why I choose A, because that is "best practice" as the question asks.

I dont know why you would use Threat Intelligence here. Looks like a manager wrote that answer.

What's up with D? Who is just blindly smashing things out to their live prod environment without any real testing or oversight?

A is correct answer they arent saying all answers are incorrect, but they are asking best practice. receiving emails from vendors about updates is okay but you still didnt implement any changes to the hardware. changing and making hardware patches without proper testing or evaluation can cause you critical issues specially if a patch breaks your system

Why not C?

D? really?...just blindly install without testing in lab first ?..I think not...A

It's A.

D sounds like a nightmare, A is the correct answer here

Can anyone explain why it is not A?