In a well-controlled environment, which of the following activities is MOST likely to lead to the
introduction of weaknesses in security software?

A.
Applying patches

B.
Changing access rules

C.
Upgrading hardware

D.
Backing up files

Explanation:

Security software will generally have a well-controlled process for applying patches, backing up
files and upgrading hardware. The greatest risk occurs when access rules are changed since they
are susceptible to being opened up too much, which can result in the creation of a security
exposure.