A systems administrator has been alerted to a zero-day vulnerability that is impacting a service enabled on a server OS. Which of the following would work BEST to limit an attacker from exploiting…

The correct answer is B. Closing open ports. A zero-day (or 0-day) vulnerability is a software vulnerability that is discovered by attackers before the vendor has become aware of it. By definition, no patch exists for zero day vulnerabilities and user systems have no defenses in place, making attacks highly likely to…

Security and disaster recovery

Question

A systems administrator has been alerted to a zero-day vulnerability that is impacting a service enabled on a server OS. Which of the following would work BEST to limit an attacker from exploiting this vulnerability?

Options

AInstalling the latest patches
BClosing open ports
CEnabling antivirus protection
DEnabling a NIDS

How the community answered

(49 responses)

A
10% (5)
B
84% (41)
C
4% (2)
D
2% (1)

Explanation

A zero-day (or 0-day) vulnerability is a software vulnerability that is discovered by attackers before the vendor has become aware of it. By definition, no patch exists for zero day vulnerabilities and user systems have no defenses in place, making attacks highly likely to succeed. One of the most common recovery methods for a zero-day attacks is to physically (or via a network-based firewall) remove all access from anyone who would have the ability to exploit it. Blocking the ports used for Remote PowerShell can limit these attacks.

Topics

#Zero-day vulnerability#Vulnerability management#Network security#Server security

Community Discussion

No community discussion yet for this question.

Full SK0-005 Practice