What did the PATCH Act propose?

• A. Forcing the government to turn over its stockpile of offensive exploits.
• B. Requiring disclosure of all encryption keys.
• C. Providing tax incentives for cybersecurity startups.
• D. Establishing a global cyber security standard.

Answer: (A)

This question centers on how cybersecurity policy treats government-held offensive tools and the push for transparency in defense. The PATCH Act is described as proposing that the government should turn over its stockpile of offensive exploits. The reasoning behind this idea is that making such capabilities or their details available helps the broader ecosystem defend itself more effectively. If researchers, vendors, and defenders know what exploits exist and how they work, they can patch systems, build mitigations, and reduce the window of opportunity for attackers. It also creates accountability—prioritizing public safety by ensuring that sensitive capabilities aren’t hidden away where they could be misused or exploited without notice.

The other options don’t align with this policy focus. Requiring disclosure of encryption keys would undermine cryptographic security and privacy by exposing the keys themselves. Providing tax incentives for cybersecurity startups is an economic policy aimed at stimulating industry growth, not about how the government handles offensive cyber capabilities. Establishing a global cybersecurity standard is about international rules and interoperability, not about the government’s handling and disclosure of its exploits for defensive purposes.

So the best-fitting idea is the one that emphasizes transparency and sharing of the government’s offensive cyber capabilities to support broader defense and patching efforts.