When a zero-day vulnerability is discovered in mission-critical systems that require high availability, immediate patching is often not possible due to lack of available patches or the risk of disrupting critical operations. In such cases, the best practice is to implement compensating controls (such as increased monitoring, access controls, network segmentation, or web application firewalls) to mitigate risk until a patch or permanent solution can be safely applied.
Reference:
CompTIA Security+ SY0-701 Official Study Guide, Domain 2.4: "For zero-day vulnerabilities in critical systems, compensating controls and heightened monitoring are often necessary to maintain availability and security until an official patch is available." Exam Objectives 2.4: "Given a scenario, implement secure system design."

Containers are a method of virtualization that allows applications to run in isolated environments with their own dependencies, libraries, and configurations. Containers are best suited for constantly changing environments because they are lightweight, portable, scalable, and easy to deploy and update. Containers can also support microservices architectures, which enable faster and more frequent delivery of software features. References: CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 10: Mobile Device Security, page 512 1

AnSLA (D)or Service Level Agreement is a formal contract that definesperformance standards, includingresponse times, escalation procedures, uptime guarantees, and other service-related metrics.
This is referenced inDomain 5.2: Explain the importance of managing third-party riskunder"Agreements (e.g., SLA, NDA, MOU/MOA, BPA)." Reference: CompTIA Security+ SY0-701 Objectives, Domain 5.2 - "Agreements: SLA (service-level agreement)."

Risk identificationis the first step in the risk management process, where potential threats and vulnerabilities are analyzed to understand their impact on an organization. This includesidentifying assets, evaluating threats, and assessing potential vulnerabilities.
Risk mitigation: Reducing risk by implementing controls.
Risk treatment: Determining how to handle identified risks.
Risk monitoring and review: Ongoing evaluation of risk controls.
Reference:CompTIA Security+ SY0-701 Official Study Guide, Security Program Management and Oversight domain.

Mobile Device Management (MDM) solutions can enforce security policies that prevent users from jailbreaking or rooting their devices-that is, from modifying the operating system to remove restrictions and gain unauthorized control. Jailbreaking can introduce significant security risks, so MDM is used to ensure device integrity by preventing users from making these changes.
Reference:
CompTIA Security+ SY0-701 Official Study Guide, Domain 3.2: "MDM solutions can be used to prevent users from jailbreaking or rooting devices, maintaining the integrity of the OS." Exam Objectives 3.2: "Summarize security implications of embedded and specialized systems."