What describes the difference when comparing attack surface and vulnerability in practice?

Question

Options

• AUpdating the OS reduces the attack surface, and installing separate optional patches remediates
• BPatching SMB vulnerability is an attack surface reduction, and the open unused ports are the
• CA SMB server that can allow remote code execution is a vulnerability, and closing port 139 is an
• DThe attack surface is the SQL injection targeted on the database, and the database tables are the

• A
  86% (31)
• B
  8% (3)
• C
  3% (1)
• D
  3% (1)

Explanation

Updating the operating system reduces the overall attack surface by removing exposed or unnecessary components, while applying specific patches directly fixes individual vulnerabilities that could otherwise be exploited.

No community discussion yet for this question.