Which of the following types of application attacks would be used to identify malware causing security
breaches that have NOT yet been identified by any trusted sources?
Correct Answer: A
Section: Threats and Vulnerabilities
Explanation/Reference:
Explanation:
The security breaches have NOT yet been identified. This is zero-day vulnerability.
A zero-day vulnerability refers to a hole in software that is unknown to the vendor. This security hole is
then exploited by hackers before the vendor becomes aware and hurries to fix it-this exploit is called a
zero-day attack. Uses of zero day attacks can include infiltrating malware, spyware or allowing unwanted
access to user information. The term "zero day" refers to the unknown nature of the hole to those outside
of the hackers, specifically, the developers. Once the vulnerability becomes known, a race begins for the
developer, who must protect users.