AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/secplus-patch-unpatchable-isolate

A legacy device can no longer be patched because the vendor ended support. What does NIST SP 800-40r4 suggest?

Start playing free

  1. Ignore it because there are no patches
  2. Isolate it or apply other compensating mitigations
  3. Patch it with a different vendor's updates

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Security Pro Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. NIST SP 800-40 Rev. 4, Guide to Enterprise Patch Management Planning nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-40r4.pdf Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyGiving each user only the access needed for their assigned tasks follows which principle?Security & PrivacyWhich hardening step reduces the attack surface by removing what a system does not need?Security & PrivacyA list of applications authorized to run, with everything else blocked by default, is called what?

That's stuff everyone should know.