Exam SY0-601 topic 1 question 40 discussion

I'll go with C. A says it can be protected by ANY means which is not true, sure the exploit itself doesn't have a patch yet but we can isolate the effected system or have some kind of compensating control in place.

The statement that BEST describes zero-day exploits is that they are initially undetectable, and no patch for them exists. A zero-day exploit is a security vulnerability or weakness in software or hardware that is unknown to the vendor or developers and, therefore, has no official patch or fix available. As a result, attackers can take advantage of the vulnerability without any defense or mitigation in place.

The statement that best describes zero-day exploits is that they are initially undetectable, and no patch for them exists. A zero-day exploit refers to a security vulnerability or weakness in software or systems that is unknown to the vendor or developer and, therefore, lacks a patch or fix. The term "zero-day" signifies that the vulnerability is exploited on the same day it is discovered, with no prior knowledge or defense against it.

Unknown vulnerability with no patch available

C. A zero-day exploit is initially undetectable, and no patch for it exists. A zero-day exploit refers to a type of cyber attack that utilizes a previously unknown vulnerability in software or hardware that hasn't been identified or fixed by the manufacturer. As a result, there is no existing protection or patch to defend against it, making it a significant risk to organizations and individuals. When a zero-day exploit is discovered, the first priority is to alert the vendor and hope that they can develop a patch as quickly as possible.

C. zero day attacks are attacks that exploit a vulnerablity that is unknown, therefore, no patch is available.

Zero-day = Never seen before attack Therefore it cannot be patched or recognized in a database if it has not occurred or been documented before.

Answer C = A zero-day exploit is initially undetectable, and no patch for it exists. The other closest answer could be --> "A = When a zero-day exploit is discovered, the system cannot be protected by any means." However, this statement is not precise as it implies the system cannot be protected by any means, which is not true. Other answers are not as precise. Therefore, answer corresponds to letter C in my opinion...

Agree with C being the best choice answer here