Security+ SY0-801
Vulnerabilities and Attack Surfaces
System vulnerabilities
- What does it mean for security when a vendor ends support for an operating system (end of life)? Easy
- A vendor released a patch for a critical flaw three months ago, but a server has not yet been updated. What is this state called? Easy
- What is a zero-day vulnerability? Easy
- Why should all unneeded ports and services on a server be disabled? Easy
- Without IT's knowledge, a department uses a free cloud storage service for customer data. What is this called? Easy
- An employee connects a private Wi-Fi router to a network outlet in the office. What is this device called? Easy
- After installation, a database server is reachable from the internet with the vendor's default password. What type of vulnerability is this? Easy
Code vulnerabilities
System vulnerabilities
System vulnerabilities
- A production line is controlled by a computer with an operating system that is no longer supported. The line's manufacturer does not approve a newer system. Which measures are appropriate? Hard
- A vendor reports an actively exploited flaw in your VPN gateway; a patch will only be available in a week. Which measures make sense until then? Hard