What is the BEST way to address vulnerabilities associated with a recent increase in the number of zero-day attacks?

The correct answer is B. Implement a behavior anomaly detection solution.. Zero-day attacks exploit vulnerabilities for which no patch or signature exists. Since traditional signature-based defenses (antivirus, patch management) cannot protect against unknown vulnerabilities, a behavior anomaly detection solution is the best countermeasure - it identifi

Submitted by minji_kr· Apr 18, 2026Information Security Program Development and Management

Question

Options

AImplement automated antivirus updates.
BImplement a behavior anomaly detection solution.
CDevelop a patching program.
DImplement USB port control throughout the company.

How the community answered

(48 responses)

A
13% (6)
B
75% (36)
C
8% (4)
D
4% (2)

Explanation

Zero-day attacks exploit vulnerabilities for which no patch or signature exists. Since traditional signature-based defenses (antivirus, patch management) cannot protect against unknown vulnerabilities, a behavior anomaly detection solution is the best countermeasure - it identifies deviations from normal system or user behavior that may indicate exploitation, regardless of whether the specific exploit is known. Option A (automated antivirus updates) relies on existing signatures and cannot detect zero-days. Option C (patching program) addresses known vulnerabilities, not zero-days. Option D (USB port control) addresses only physical media as an attack vector and does not address the broad zero-day threat landscape.

Topics

#Zero-day attacks#Behavioral anomaly detection#Threat detection#Vulnerability mitigation

Community Discussion

No community discussion yet for this question.

Full CISM Practice