039_Zero-day Vulnerabilities – CompTIA Security+ SY0-701 – 2.3

Front

What are zero-day vulnerabilities?

Back

Previously unknown software flaws not yet patched by vendors.

Front

Who typically discovers unknown vulnerabilities in software?

Back

Researchers and attackers

Front

What is a zero-day attack?

Back

An attack that exploits a flaw before a patch is available

Front

Why are zero-day attacks dangerous?

Back

Defenders are unaware of the flaw being exploited

Front

What happens once a vulnerability becomes known to the security community?

Back

Developers start working on a patch

Front

Why is it difficult to defend against zero-day threats?

Back

The vulnerability is unknown at the time of the attack

Front

Where can known vulnerabilities be publicly tracked?

Back

CVE.mitre.org

Front

What does CVE stand for?

Back

Common Vulnerabilities and Exposures

Front

What should users do when a patch is released?

Back

Apply the patch as soon as possible

Front

What is a memory corruption issue in the context of zero-day attacks?

Back

A flaw that allows unintended code execution