During a requirements gathering workshop, the customer's Chief Information Security Office (CISO) provides the following requirements that are pertinent to the design of a new vSphere environment:
✑ All operating system critical patches must be installed within 24 hours of release.
✑ All virtual machine templates must be updated every three months in line with company policy.
Which requirement classification is being gathered for the design documentation?
The requirements given by the CISO concern installing operating system critical patches promptly and updating virtual machine templates regularly, which are both key measures to maintaining the security posture of the environment. Ensuring timely updates and patches is directly related to safeguarding the system against vulnerabilities, minimizing risk exposure, and adhering to security policies.
Lifecycle managment and patch definition is cover by Manageability Nonfunctional requirement, by Design 7 course.
Agree B https://securityboulevard.com/2020/12/building-non-functional-requirements-framework-requirements-categories/
could you share that information please.
Answer is B. See the following example: ESXi host updates must be installed within 1 week of release...the only change is host vs VMs...it is under Manageability. Example from the vSphere Design 7 course...
I think A is correct. This is lifecycle management function. The requirement is system critical patches, not system security patches.
i think is A
From design course , if you see the word : < patch> ,just choose manageability .
A. Security All operating system critical patches must be installed within 24 hours of release. All virtual machine templates must be updated every three months in line with company policy. Both are security related
i think is A
I'd say A security
B, "patch management" in page 342
A, security
I would go with B.
I think it´s A. The CISO (Security) provide following REQ´s... - Update within 24h is a Security REQ. - Update Templates to..
As per book page 346 LCM Is part of manageability
I would go with B. .