Threats & AttacksQuestion 4 of 100
Which term describes a previously unknown software vulnerability for which no patch yet exists?
a.Legacy flaw
b.Misconfiguration
c.Race condition
d.Zero-day
Explanation
A zero-day is a vulnerability unknown to the vendor and defenders, giving zero days to prepare a fix. Attackers exploiting it face no available patch. Compensating controls like segmentation and behavior-based detection help mitigate the risk.
Practice all 100 questions free — no signup required.
Related questions on this topic
- An attacker sends an email that appears to come from the company CEO, urgently asking the finance team to wire funds to a new vendor. What type of social engineering attack is this?
- Which malware type encrypts a victim's files and demands payment for the decryption key?
- A user reports that their credentials worked on a fake login page that looked identical to the corporate portal. Which attack most likely occurred?
- An attacker overwhelms a web server with traffic from thousands of compromised devices, making it unavailable. What is this called?
- Which type of threat actor is typically well-funded, highly skilled, and motivated by espionage on behalf of a government?
- A disgruntled employee copies confidential designs to a USB drive before resigning. This is an example of what threat?
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against CompTIA Security+ (SY0-701) · How we review