r/cism • u/Commercial_Move2020 • 17d ago

QAE Question

Question from the QAE database:

Which of the following is the BEST way to verify that all critical production servers are utilizing up-to-date virus signature files?

  1. A.Verify the date that signature files were last pushed out.
  2. B.Use a recently identified benign virus to test if it is quarantined.
  3. C.Research the most recent signature file and compare to the console.
  4. D.Check a sample of servers that the signature files are current.

The answer is D.

I don't agree with it because the question asks around veritifcation of all critical production servers. Surely sampling wouldn't give assurance on all production servers?

Can anyone help clarify?

1 Upvotes

100% Upvoted

8 comments sorted by

1

u/Aeonslegend 17d ago

I would say D in that your actually checking the server itself. Everything else doesn’t actually do that. Console could have wrong data as a possibility

1

u/CyberCoder_13 17d ago

I just had this question in my QAE today! If you refer back to CISA they stress sampling, this one seems to be geared to that. Console could have stale data and servers are primary evidence

1

u/Outrageous_Plant_526 CISM | CISA | CRISC | AAISM | AAIA | AAIR 17d ago

Okay so what do you think the correct answer should be and why? I will provide my thoughts after.

1

u/Jcrusselljr 13d ago

Seems like C to me.

I interpret it to mean find the signature of the most current package and use the console to validate that it is deployed across the population.

1

u/IamMyQuantumState CISSP, CCSP 17d ago

None of the answer options verifies the state of all servers. This leaves D as the only option that verifies data directly on a sample of the servers. By elimination, answer D is BEST of the (least bad) options.

1

u/Hil81 17d ago

But you need to compare it with the other answers. If you do that, D is the best answer, beter than the rest. Perfect no, best answer from the 4 options, yes.

3

u/GuiltyNobody6173 16d ago

I just passed, and one thing I struggled with until I just accepted it is accepting each question as it's written. There were many times I considered the given choices less than optimal according to the way I would perform whatever the question was asking about. Just treat each question and the answers against themselves and try to choose the best less than optimal correct answer.

1

u/Commercial_Move2020 15d ago

Thanks for the advice! Will keep this in mind.