SY0-501 · Question #438
Which of the following solutions should an administrator use to reduce the risk from an unknown vulnerability in a third-party software application?
The correct answer is A. Sandboxing. To mitigate risks from unknown vulnerabilities in third-party applications, an administrator should implement sandboxing, which isolates the application to prevent exploits from affecting the broader system.
Question
Which of the following solutions should an administrator use to reduce the risk from an unknown vulnerability in a third-party software application?
Options
- ASandboxing
- BEncryption
- CCode signing
- DFuzzing
How the community answered
(18 responses)- A72% (13)
- B11% (2)
- C11% (2)
- D6% (1)
Why each option
To mitigate risks from unknown vulnerabilities in third-party applications, an administrator should implement sandboxing, which isolates the application to prevent exploits from affecting the broader system.
Sandboxing creates an isolated environment for the third-party application, ensuring that any exploits leveraging an unknown vulnerability are contained within that sandbox and cannot compromise the underlying operating system or other critical resources.
Encryption primarily protects data confidentiality at rest or in transit, and does not prevent an unknown software vulnerability from being exploited.
Code signing verifies the authenticity and integrity of software, but it does not prevent legitimate, signed software from containing or exposing unknown vulnerabilities.
Fuzzing is a testing technique used to discover vulnerabilities before deployment, not a runtime control to reduce risk from an unknown vulnerability in deployed software.
Concept tested: Application isolation for vulnerability mitigation
Source: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview
Topics
Community Discussion
No community discussion yet for this question.