039_Zero-day Vulnerabilities – CompTIA Security+ SY0-701 – 2.3

What are zero-day vulnerabilities?

• Previously unknown software flaws not yet patched by vendors.

• Software flaws that have been patched by vendors.

• Common software bugs that are easily fixable.

• Vulnerabilities that are known but not exploited.

What is a secure boot process?

• A sequence that verifies code during system startup

• A method to increase system performance

• A technique for data encryption

• A process for regular software updates

Who typically discovers unknown vulnerabilities in software?

• Software developers

• Researchers and attackers

• End users

• System administrators

What does CVE stand for?

• Common Vulnerabilities and Exposures

• Common Variable Environment

• Computer Vulnerability Evaluation

• Common Value Encryption

What is arbitrary code execution?

• Running unauthorized code on a system

• Executing code with user permissions

• Running code in a virtual environment

• Executing code only in a sandbox

How can attackers use zero-day flaws?

• To run code or steal data before detection

• To improve system performance

• To enhance user experience

• To create backup copies of data

When do zero-day attacks typically occur?

• After a patch is released

• Before a patch is released

• During a software update

• When the software is first launched

What is the role of security researchers?

• Discover flaws and report them to vendors

• Develop new software applications

• Manage IT infrastructure

• Provide technical support to users

What is a zero-day attack?

• An attack that exploits a flaw before a patch is available

• A type of attack that occurs on the same day a vulnerability is discovered

• An attack that targets systems with outdated software

• A security breach that is reported after a patch is released

Why are zero-day attacks dangerous?

• Defenders are unaware of the flaw being exploited

• The attacks are easy to detect

• They only affect outdated software

• They can be easily mitigated by firewalls