A security analyst is investigating a system compromise. The analyst verifies the system was up to date on OS patches at the time of the compromise. Which of the following describes the type of vulnerability that was MOST likely exploited?
A) Insider threat
B) Buffer overflow
C) Advanced persistent threat
D) Zero day

Question

Quizplus · Accepted Answer

A zero-day vulnerability is one that is unknown to the software vendor and has no patch available, making it likely to be exploited even if the system is up to date on patches.

A Security Analyst Is Investigating a System Compromise