Operating System Vulnerabilities

Question 1

OS systems that have not been updated with latest security patches or fixes

Answer 1

Unpatched Systems

Question 2

Vulnerabilities in software or hardware yet unknown to the developer and not publicly disclosed

Answer 2

Zero-Day Vulnerabilities

Question 3

Occurs when systems settings are not properly configured, leaving the system vulnerable to exploitation

Answer 3

Misconfiguration

Question 4

Unauthorized data transfer from within an organization to an external location

Answer 4

Data exfiltration

Mitigation - defense in depth approach including use of encryption and endpoint protection tools like host-based firewalls to control inbound/outbound traffic

Question 5

Occur when an attacker has been able to craft a malicious update to a well-known and trusted program in order to compromise the systems of the program’s end users

Answer 5

Malicious Updates

Mitigation: only source patches and updates from a trusted vendor and official channels
-Application allow-listing
-verify authenticity of updates using a digital signature or hash