Question
Which of the following describes a vulnerability that has been exploited before a patch or remediation is available?
- A. Spoofing
- B. Brute-force
- C. DoS
- D. Zero-day Correct
Explanation
A zero-day is a vulnerability that attackers exploit before the vendor has released a patch or other remediation, so defenders have had zero days to fix it. Spoofing is impersonating a trusted source, brute force is guessing credentials by trying many combinations, and DoS is an attack that makes a service unavailable; none of these describes the timing of exploitation relative to a patch.
