SY0-701 · Question #918
Which of the following is a risk for a company using end-of-life applications on its network?
The correct answer is C. Vulnerable software. Vulnerable software (C) is correct because end-of-life (EOL) applications no longer receive security patches or updates from their vendor, meaning any discovered vulnerabilities remain permanently unpatched and exploitable by attackers. Why the distractors are wrong: A (Default…
Question
Which of the following is a risk for a company using end-of-life applications on its network?
Options
- ADefault credentials
- BOpen service ports
- CVulnerable software
- DInsecure networks
How the community answered
(24 responses)- B4% (1)
- C96% (23)
Explanation
Vulnerable software (C) is correct because end-of-life (EOL) applications no longer receive security patches or updates from their vendor, meaning any discovered vulnerabilities remain permanently unpatched and exploitable by attackers.
Why the distractors are wrong:
- A (Default credentials) is a misconfiguration risk that applies to newly deployed or poorly managed systems - not specifically tied to EOL status.
- B (Open service ports) is a network exposure issue caused by firewall misconfigurations or unnecessary services, not inherently linked to software reaching end-of-life.
- D (Insecure networks) is too broad and relates to network architecture/design flaws, not the specific consequence of running outdated software.
Memory tip: Think "EOL = No more patches = Forever vulnerable." The defining characteristic of end-of-life software is the absence of ongoing security fixes, which directly maps to vulnerable software - the other options describe separate, independently caused security problems.
Topics
Community Discussion
No community discussion yet for this question.