You discover an infected email attachment that contains software code that attacks a known vulnerability in a popular social networking application. This type of software is an example of which type…

Question

Options

• Asocial engineering
• Bvirus
• Cphishing
• Dexploit

• A
  3% (1)
• C
  3% (1)
• D
  93% (28)

Explanation

Option D (exploit) is correct because the software specifically targets a known vulnerability in an application - that's the defining characteristic of an exploit. Exploits are code or techniques designed to take advantage of security flaws in software.

Why the distractors are wrong:

• A (social engineering) is a manipulation technique used to deceive people, not a software category - the infected attachment itself may arrive via social engineering, but the code attacking the vulnerability is not social engineering.
• B (virus) requires self-replication and spreading to other files or systems; the question doesn't indicate that behavior.
• C (phishing) is a social engineering method for stealing credentials or tricking users into action - it describes the delivery mechanism (a deceptive email), not the malicious payload itself.

Memory tip: Think of the word "exploit" as exploiting a weakness - whenever you see "attacks a known vulnerability," the answer is exploit. The infected email is just the delivery vehicle; the payload that attacks the vulnerability is the exploit.

No community discussion yet for this question.