A security analyst, Ann, is reviewing an IRC channel and notices that a malicious exploit has been
created for a frequently used application. She notifies the software vendor and asks them for
remediation steps, but is alarmed to find that no patches are available to mitigate this vulnerability.
Which of the following BEST describes this exploit?
A.
Malicious insider threat
B.
Zero-day
C.
Client-side attack
D.
Malicious add-on
Explanation:
Why is it called “zero day”
Zero day is in reference to the fact that it is previously unrecorded. Like an infection or outbreak. Zero day is the day it was noticed.
What is Ann doing hanging out on IRC all day? Time for job rotation, let her clean the bathrooms for a month.