200-201 Question 95
Single answerA cybersecurity analyst is reviewing an organization's security posture and notices that an outdated web application is accessible from the internet. The application has known vulnerabilities due to lack of updates. Which statement accurately differentiates between the attack surface and the vulnerability in this scenario?
- A
The attack surface refers to the outdated web application, while the vulnerability refers to the lack of updates.
- B
The attack surface refers to the lack of updates, while the vulnerability refers to the outdated web application.
- C
The attack surface refers to the known vulnerabilities, while the vulnerability refers to the outdated web application.
- D
The attack surface refers to the internet-exposed outdated web application, while the vulnerability refers to the lack of updates.
Show answer and explanation
Correct answer: D
Explanation
The attack surface is the total set of exploitable points in a system or network, in this case, the internet-exposed outdated web application. The vulnerability refers to specific weaknesses, such as the lack of updates, that can be exploited within the attack surface.
- A. Incorrect.
Incorrect: The attack surface represents the total set of points that an attacker can exploit, not the outdated web application by itself. The vulnerability is correctly associated with the lack of updates.
- B. Incorrect.
Incorrect: The lack of updates is the specific vulnerability, not the attack surface. The attack surface is broader and includes all potential entry points, such as the exposed web application.
- C. Incorrect.
Incorrect: Known vulnerabilities are part of the risk, but the attack surface refers to the exposed system or entry point, not the vulnerabilities themselves. The outdated application is part of the attack surface, and the lack of updates is the vulnerability.
- D. Correct.
Correct: The attack surface encompasses the exposed outdated web application, which serves as a potential entry point for attackers. The vulnerability specifically refers to the lack of updates that leaves the application exploitable.