Cert Master

KT-SYS Patch management

WSUS shows 95% compliance but Nessus still flags missing KBs. Likely cause?

Multiple choice — select one answer

Answer choices

  1. a. Nessus invents CVEs, without security or identity team coordination per policy.
  2. b. Superseded updates not installed or wrong scan credentials / reboot pending
  3. c. Compliance is always 100% accurate, without security or identity team coordination per policy.
  4. d. Patches remove antivirus, without security or identity team coordination per policy.

Architectural breakdown & explanation

Reconcile WSUS agent state with vuln scanner and pending reboots.

Correct answer(s): b. Superseded updates not installed or wrong scan credentials / reboot pending

Exam domain: Patch management (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — System Hygiene bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications