100-160 Question 15
Single answerA company recently experienced a ransomware attack that exploited a known software vulnerability. Upon investigation, it was discovered that the affected system had not received the latest security updates. Which of the following best describes the cybersecurity concepts involved in preventing such an attack?
- A
Hardening the system to reduce vulnerabilities
- B
Ensuring confidentiality to protect sensitive data
- C
Implementing the CIA triad to prevent attacks
- D
Using ethical hacking to identify insider threats
Show answer and explanation
Correct answer: A
Explanation
Preventing ransomware attacks like the one described requires reducing vulnerabilities through hardening. Hardening includes applying security updates and patches to mitigate the risk of exploitation. This directly addresses the root cause of the attack in this scenario.
- A. Correct.
Hardening the system involves applying security updates, patches, and configuration changes to reduce vulnerabilities, which directly addresses the issue in this scenario.
- B. Incorrect.
Confidentiality is about protecting sensitive data from unauthorized access, but it does not specifically address the importance of applying security updates to prevent exploits.
- C. Incorrect.
The CIA triad (Confidentiality, Integrity, Availability) is a foundational cybersecurity principle, but it is not a direct action or process for preventing vulnerabilities like unpatched systems.
- D. Incorrect.
Ethical hacking helps identify potential vulnerabilities or threats through simulated attacks, but it is not the direct process described for addressing unpatched software vulnerabilities.