What Is the Most Critical Risk of Running End-of-Life Software?

SY0-701 By islever Editorial Last updated

Short answer

A Lack of security updates

Question

A third-party vendor is moving a particular application to the end-of-life stage at the end of the current year. Which of the following is the most critical risk if the company chooses to continue running the application?
  1. Lack of security updates Correct Answer
  2. Lack of new features
  3. Lack of support
  4. Lack of source code access

Key Takeaways

The exam tests the distinction between operational inconveniences and security-critical risks; the key trap is confusing 'lack of support' with 'lack of security updates', the latter being the direct cause of exploitable vulnerabilities.

When a third-party vendor ends support for an application, the most critical risk is the lack of security updates, leaving known vulnerabilities unpatched and the organization exposed to exploitation. Community consensus strongly favors option A.

Common mistake: Choosing 'Lack of support' is a common mistake because support covers multiple areas, but the highest-impact consequence of end-of-life is the cessation of security patches, which directly increases cyber risk.

Expert Analysis

Why the Answer Is Correct

End-of-life (EOL) means the vendor no longer provides patches, including security fixes. Without security updates, known vulnerabilities remain open, making the application an easy target for attackers. This is the most critical risk because it directly exposes the company to data breaches, malware, and compliance violations.

Why the Other Options Are Wrong

'Lack of new features' is a functional limitation, not a security risk. 'Lack of support' is broader but secondary—support alone does not mitigate vulnerabilities if no patches are issued. 'Lack of source code access' may hinder internal fixes, but it is not the primary risk in a typical third-party EOL scenario.

Community Comment Notes

The comments unanimously endorse option A, with one simply stating "A. Lack of security updates is correct." Another comment notes "A | A GPT," indicating agreement. These reinforce the exam's focus on security implications rather than general maintenance concerns.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When asked for the 'most critical risk' of end-of-life software, immediately think about security patches and vulnerabilities. Eliminate options that describe non-security impacts, and remember that 'support' is a means to an end, not the end itself.

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. a4e15bd 👍 2
    A. Lack of security updates is correct.
  2. qacollin 👍 1 Answered A
    A. GPT
  3. fmeox567 👍 1 Answered A
    A GPT

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide