Question

A system administrator receives a critical security patch from a vendor for the company's production database servers. Before deploying it fleet-wide, what should the administrator do first according to sound configuration and patch management practices?

Accepted Answer

Test the patch in a non-production/test environment to verify it works and does not break functionality

Answer

Apply the patch immediately to all production servers to eliminate the vulnerability as fast as possible

Answer

Wait until the next scheduled annual maintenance window regardless of severity

Answer

Uninstall the affected database software until a full version upgrade is available