What term describes a security measure used to mitigate a known vulnerability by preventing an exploit from occurring without modifying the underlying software?
The correct answer is 'Virtual patches.' Virtual patches are usually implemented on network security devices such as WAFs (Web Application Firewalls) or IPS (Intrusion Prevention Systems) and are designed to protect against exploits by either blocking or filtering malicious traffic associated with the vulnerability. This method allows for immediate response to emerging threats while the software vendors develop and release permanent fixes. 'Service patches' is a made-up term and not related to the correct concept. Although 'Security hotfixes' and 'Scheduled updates' are both associated with addressing software vulnerabilities, they involve actual changes to the software code, unlike virtual patches.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are Web Application Firewalls (WAFs)?
Open an interactive chat with Bash
How do Intrusion Prevention Systems (IPS) work?
Open an interactive chat with Bash
What are the differences between virtual patches and traditional patches?