What is the difference between attack surface and vulnerability management?

Question

Options

• AVulnerability management is to create strong user access protocols, and the attack surface is to
• BAttack surface reduction is to block all ports except port 80, and vulnerability management is to
• CVulnerability management is to protect backups, and attack surface is to find critical OS drawback
• DAttack surface reduction is to defend against SQL injection attacks, and vulnerability management

• A
  7% (2)
• B
  89% (25)
• C
  4% (1)

Explanation

The attack surface refers to all the possible entry points (e.g., open ports, services, exposed APIs, applications) through which an attacker could exploit a system. Attack surface reduction involves minimizing these entry points to reduce the risk of an attack. For example, blocking all unnecessary ports except essential ones (like port 80 for HTTP traffic) reduces the avenues an attacker can use. Vulnerability management is the process of identifying, assessing, and mitigating vulnerabilities (weaknesses or flaws) in a system, such as software bugs, configuration issues, or outdated systems. Correcting programming bugs, such as fixing buffer overflow vulnerabilities or patching software, is part of vulnerability management.

No community discussion yet for this question.