An application company sent out a software patch for one of their applications on Monday. The company has been receiving reports about intrusion attacks from their customers on Tuesday. Which of the…

The correct answer is A. Zero day. A zero-day attack exploits a vulnerability that is publicly known (or newly disclosed) before a patch is widely applied. In this scenario, the patch was released Monday but attacks began Tuesday - meaning attackers reverse-engineered the patch to identify the underlying…

Threats, vulnerabilities, and mitigations

Question

An application company sent out a software patch for one of their applications on Monday. The company has been receiving reports about intrusion attacks from their customers on Tuesday. Which of the following attacks does this describe?

Options

AZero day
BDirectory traversal
CLogic bomb
DSession hijacking

How the community answered

(39 responses)

A
92% (36)
B
3% (1)
D
5% (2)

Explanation

A zero-day attack exploits a vulnerability that is publicly known (or newly disclosed) before a patch is widely applied. In this scenario, the patch was released Monday but attacks began Tuesday - meaning attackers reverse-engineered the patch to identify the underlying vulnerability and immediately weaponized it against users who had not yet applied the fix. This is the classic 'patch-based zero-day' pattern. Directory traversal is a path manipulation attack, a logic bomb is malicious code triggered by a condition, and session hijacking steals authenticated sessions - none fit the timeline described.

Topics

#zero-day attack#vulnerability exploitation#patch management

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice