Certified Incident Handler (CIH) Practice Ecam

What risk is associated with an attack that exploits a previously unknown vulnerability in software?

1. Advanced Persistent Threat

2. Zero-Day Attack

3. New Malware Variant

4. Phishing Scheme

The correct answer is: Zero-Day Attack

A risk associated with an attack that exploits a previously unknown vulnerability in software is known as a Zero-Day Attack. This type of attack targets vulnerabilities that are not yet known to the software vendor or the public, meaning there are no patches or fixes available at the time of the exploitation. Because these vulnerabilities remain unaddressed, attackers can exploit them without immediate detection, posing a significant security risk. The term "zero-day" refers to the fact that the vulnerability has had zero days of protection and awareness, making it particularly dangerous. Organizations may be caught off guard, as they have not had the opportunity to implement safeguards against the newly discovered weakness. Advanced Persistent Threats typically involve more prolonged and targeted attack strategies, often utilizing various methods rather than relying solely on unknown vulnerabilities. New Malware Variants refer to modified forms of existing malware rather than newly discovered vulnerabilities in software. Phishing Schemes are primarily social engineering attacks aimed at tricking users into divulging sensitive information and do not directly involve technical exploits of software vulnerabilities.