Valid SY0-401 Dumps shared by EduDump.com for Helping Passing SY0-401 Exam! EduDump.com now offer the newest SY0-401 exam dumps, the EduDump.com SY0-401 exam questions have been updated and answers have been corrected get the newest EduDump.com SY0-401 dumps with Test Engine here:
A network administrator identifies sensitive files being transferred from a workstation in the LAN to an unauthorized outside IP address in a foreign country. An investigation determines that the firewall has not been altered, and antivirus is up-to-date on the workstation. Which of the following is the MOST likely reason for the incident?
Correct Answer: D
Explanation/Reference: Explanation: This question states that antivirus is up-to-date on the workstation and the firewall has not been altered. The antivirus software is up to date with all 'known' viruses. A zero-day vulnerability is an unknown vulnerability so a patch or virus definition has not been released yet. A zero-day vulnerability refers to a hole in software that is unknown to the vendor. This security hole is then exploited by hackers before the vendor becomes aware and hurries to fix it-this exploit is called a zero-day attack. Uses of zero day attacks can include infiltrating malware, spyware or allowing unwanted access to user information. The term "zero day" refers to the unknown nature of the hole to those outside of the hackers, specifically, the developers. Once the vulnerability becomes known, a race begins for the developer, who must protect users.