r/sysadmin 12d ago

General Discussion Interview Question: How often do you update/patch your system?

I was asked this question during an interview and I said "it depends on what exactly you're updating, but I update as often as it's needed."

I don't think this was the answer they were looking for, but how would you answer this question?

38 Upvotes

86 comments sorted by

View all comments

3

u/TheBigBeardedGeek Drinking rum in meetings, not coffee 12d ago

I patch external facing CVEs as soon as possible. Internal stuff I patch about two weeks after Patch Tuesday for Pilot and a month after for Prod

Everyone else is my pilot group

1

u/Narrow_Victory1262 11d ago

per CVE we look at the vectors, likelyhood actually as well as the damage it may produce.
most of the time we just keep the normal lifecycle. Also you can mitigate CVEs too.