Which term describes exploits targeting vulnerabilities not yet known?

• A. Exploits
• B. Zero-day Attacks
• C. Patch Management
• D. Living off the Land Attacks

Answer: (B)

Zero-day attacks describe exploits that take advantage of vulnerabilities that are unknown to the vendor and to defenders, with no patch or signature available yet. Since the flaw isn’t known, there’s no fix in place and security tools often can’t detect or block the attack until the vulnerability is disclosed and a patch is released. That unknown-unknown nature is what makes zero-day exploits particularly dangerous.

Exploits in general are just code or techniques to take advantage of a vulnerability, but they aren’t restricted to unknown flaws. Patch management is about applying fixes after vulnerabilities are disclosed, so it doesn’t describe exploiting unknown weaknesses. Living off the land attacks rely on abusing legitimate, already present tools to do harm, not on exploiting unknown vulnerabilities.