Which term refers to threats that exploit vulnerabilities not yet known to vendors?

• A. Exploits
• B. Patch Management
• C. Ransomware
• D. Zero-day Attacks

Answer: (D)

Zero-day attacks describe threats that take advantage of vulnerabilities that vendors do not yet know about. Because there’s no patch or fix available, attackers can exploit these flaws before defenders have a remedy, creating a high-risk window of opportunity. Explains why this fits best: it specifically refers to exploits of unknown vulnerabilities and the absence of a known fix.

Other options don’t fit as precisely. Exploits is a broad term for techniques used to abuse vulnerabilities, whether known or unknown, so it’s not limited to those not yet disclosed. Patch management is about applying fixes for vulnerabilities that are already known, so it doesn’t capture the unknown‑vulnerability angle. Ransomware refers to a class of malware that encrypts files for ransom, not the concept of exploiting undiscovered flaws.