Which Term Describes a Legacy Device Stopping Patch Updates?
A legacy device is being decommissioned and is no longer receiving updates or patches. Which of the following describes this scenario?
Community Votes
52% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question traps candidates who apply real-world vendor tiered support models instead of CompTIA’s unified lifecycle terminology, leading them to incorrectly select End of Support.
This question tests CompTIA’s standardized definitions for product lifecycle stages, specifically distinguishing End of Life (EOL) from End of Support (EOS). While enterprise vendors sometimes separate these phases, CompTIA treats EOL as the definitive point when a device is retired and ceases all updates, patches, and vendor assistance.
Most candidates choose End of Support (Option C) because the phrase 'no longer receiving updates or patches' appears to literally define support cessation. However, in CompTIA’s framework, once a legacy device stops receiving patches and is slated for decommissioning, it has reached End of Life, making EOS a distractor based on nuanced vendor practices rather than exam objectives.
Community Discussion (64 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Core Concept: Product Lifecycle Terminology
In cybersecurity asset management, manufacturers follow a structured lifecycle that dictates how long hardware and software remain viable and secure. For the SY0-701 exam, End of Life (EOL) marks the final stage where a product is officially retired, discontinued from sales, and completely removed from the manufacturer’s security roadmap. At this point, the device stops receiving firmware updates, security patches, technical assistance, or warranty services.Why End of Life (D) is Correct
The scenario explicitly states the legacy device is 'being decommissioned' and 'no longer receiving updates or patches.' CompTIA defines EOL as the complete cessation of vendor support and patching. When a device reaches this state, it becomes a significant security liability if kept online, which is why decommissioning or rigorous isolation is required. Community comment #8 correctly notes that EOL aligns with full retirement and zero patch availability, matching the exam’s expected answer.Why End of Support (C) is a Distractor
Many candidates select End of Support because they conflate CompTIA’s simplified model with real-world vendor policies. In practice, companies like Microsoft or Cisco often publish an EOL date followed months later by an End of Support (EOS) date, during which extended paid support or critical-only patches may continue. Comments #2, #6, and #12 highlight this confusion. However, SY0-701 does not test vendor-specific extended support programs; it expects you to recognize that when patching stops and decommissioning begins, the lifecycle phase is EOL. Option C is intentionally designed to catch test-takers overthinking the terminology.Exam Takeaway
Always align your reasoning with CompTIA’s baseline definitions rather than enterprise vendor lifecycles. If a system is no longer patched and is marked for decommissioning, mark it as End of Life immediately.Official Reference
- https://www.comptia.org/certifications/security#:~:text=Security%20%28SY0%2D701%29
- NIST Special Publication 800-53 Rev. 5 (SI-2 Flaw Remediation)
- CompTIA Security+ SY0-701 Official Study Guide - Chapter 1: General Security Concepts
Exam Strategy
When encountering lifecycle terminology questions, ignore real-world vendor exceptions and stick strictly to CompTIA’s standardized definitions. If a system stops receiving patches and is marked for decommissioning, automatically associate it with End of Life (EOL) rather than getting distracted by extended support nuances.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →