Examkin

Soru

Zorluk: ZorKey Security Concepts, Threats, Vulnerabilities, and Mitigations

During an enterprise security audit following a system compromise, an incident response team discovers that a database server was accessed without authorization. The investigation shows that an outdated operating system service contained a coding flaw, which permitted an attacker to run a publicly available script to gain administrative access. Which security term specifically describes the flaw in the outdated operating system service?

  1. VulnerabilityCevap
  2. B
    Exploit
  3. C
    Threat
  4. D
    Risk

Cevap

The correct terminology for the coding flaw in the outdated operating system service is a vulnerability.
In security fundamentals, a vulnerability is defined as any weakness, flaw, or bug in software, hardware, or administrative controls that can be leveraged by a threat actor. The unpatched legacy operating system service containing a coding flaw is the system vulnerability.

Adım Adım Çözüm

1
Analyze the security components described in the scenario.
Identified four elements: the unpatched operating system service flaw, the publicly available script, the external attacker, and the potential business damage.
Deconstructing an incident report into core security definitions is necessary to accurately classify each component.
2
Differentiate between Vulnerability, Exploit, Threat, and Risk.
The flaw/weakness in software is the Vulnerability; the script taking advantage of it is the Exploit; the external attacker is the Threat; the calculated impact/likelihood of loss is the Risk.
Standard security framework definitions (such as ISO/IEC 27000 and NIST) strictly define these core security terms.
3
Match the specific target of the question to the correct definition.
The question specifically asks about the coding flaw present in the service, which aligns exactly with Vulnerability.
The software weakness itself is the vulnerability that enables an attack to occur.

Anahtar Kavram

Core Information Security Terminology (Threat vs. Vulnerability vs. Exploit vs. Risk)
Bu soruyu puanla

Konular

Key Security Concepts, Threats, Vulnerabilities, and Mitigations

Bu konudan daha fazla soru