Which term describes exploiting vulnerabilities before patches are available?

• A. Advanced Persistent Threats (APTs)
• B. Zero-Day Attacks
• C. Layered Protection
• D. WatchGuard Data Control

Answer: (B)

Zero-day attacks describe exploiting a security flaw at the moment it’s discovered but before a patch or fix is available. Because the vendor hasn’t released a fix yet and the vulnerability may be unknown, defenders can’t rely on an updated patch to block the exploit. Attackers seize this window to gain access, install malware, or steal data. The other terms describe different ideas: Advanced Persistent Threats are long-running, targeted campaigns by skilled groups; Layered Protection refers to defense-in-depth strategies that combine multiple controls; WatchGuard Data Control is a feature focused on managing data movement, not the vulnerability lifecycle. So the description that fits exploiting vulnerabilities before patches exist is zero-day attacks.