A vendor appliance in the municipal data center has a critical patch, but a change freeze blocks immediate installation. Which interim mitigation best reduces exposure until the patch window opens?
Select an answer to reveal the explanation.
Short Explanation
When you cannot swing the hammer yet, build a smaller room around the problem. Microsegmentation and tighter reachability are classic compensating moves while a patch waits on a freeze. Hiding the asset or opening it to the world makes things worse.
Full Explanation
When primary remediation such as patching is delayed by operational constraints, compensating mitigations reduce attack surface until the fix can be applied. Microsegmentation and restrictive network placement limit lateral movement and remote exploitation of the unpatched appliance. Ignoring advisories, exposing management interfaces, or removing inventory records do not reduce risk and can worsen governance and exposure.