SY0-701 Security Operations Practice Question
A help desk team needs to update desktops in a call center without interrupting callers during peak hours. What is the best operational approach?
⚠ Common exam trap
It's easy for candidates to choose immediate deployment (A) thinking it is the most efficient for security, overlooking the operational requirement to maintain service availability during peak hours.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Schedule the updates during an approved maintenance window
Scheduling updates during an approved maintenance window ensures that desktops are updated during a period of low activity, minimizing disruption to call center operations. This approach aligns with change management best practices, allowing for controlled deployment and rollback if issues arise, and avoids the performance degradation or reboots that could interrupt active calls.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy the updates immediately to all desktops at once
Why it's wrong here
Deploying updates immediately to every desktop at once bypasses change management and risks saturating the call center's network bandwidth, which can degrade VoIP call quality or crash thin-client sessions mid-call. It also provides no opportunity to test for application conflicts in the call center's specific software environment, and a failed update could require a time-consuming rollback across hundreds of machines, causing prolonged and widespread downtime.
- ✓
Schedule the updates during an approved maintenance window
Why this is correct
Scheduling updates during an approved maintenance window is correct because it aligns with ITIL-based change management, giving the help desk a defined, communicated time frame to apply patches, monitor for issues, and roll back if necessary. This approach minimizes user impact, ensures network and application resources are reserved for operations during business hours, and allows for staged deployment (e.g., pilot group first) to validate stability before broader release.
- ✗
Ask each user to install updates whenever they have time
Why it's wrong here
Relying on each user to manually install updates on their own schedule creates inconsistent patch coverage—some desktops may remain vulnerable for weeks while others reboot during active calls. This decentralized approach makes it impossible for the help desk to audit compliance, enforce deadlines, or coordinate with the call center's peak/off-peak hours, leading to security gaps and unpredictable interruptions.
- ✗
Disable update notifications permanently
Why it's wrong here
Disabling update notifications permanently does not pause the underlying update engine; instead, it hides pending reboots and patch status from users and IT, so systems may automatically install updates at inopportune times or remain unpatched indefinitely if the update fails silently. This removes the user's ability to schedule a reboot, increases the likelihood of forced restarts during live calls, and violates typical security policies that require visible update management and audit trails.
Go deeper
Related to this question
About these practice questions
This SY0-701 question is part of Courseiva's 1,013-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.