Threats & Attacks第 4 / 100 题
Which term describes a previously unknown software vulnerability for which no patch yet exists?
a.Legacy flaw
b.Misconfiguration
c.Race condition
d.Zero-day
解析
A zero-day is a vulnerability unknown to the vendor and defenders, giving zero days to prepare a fix. Attackers exploiting it face no available patch. Compensating controls like segmentation and behavior-based detection help mitigate the risk.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- An attacker sends an email that appears to come from the company CEO, urgently asking the finance team to wire funds to a new vendor. What type of social engineering attack is this?
- Which malware type encrypts a victim's files and demands payment for the decryption key?
- A user reports that their credentials worked on a fake login page that looked identical to the corporate portal. Which attack most likely occurred?
- An attacker overwhelms a web server with traffic from thousands of compromised devices, making it unavailable. What is this called?
- Which type of threat actor is typically well-funded, highly skilled, and motivated by espionage on behalf of a government?
- A disgruntled employee copies confidential designs to a USB drive before resigning. This is an example of what threat?