Question

Which of the following provides the MOST accurate description of zero-days in vulnerability management reporting and communication?

answer

Zero-days are vulnerabilities that should only be tracked if actively exploited.


Zero-days are vulnerabilities that require immediate attention and must track in a dashboard.


Zero-days are low priority vulnerabilities that can be ignored until a patch is available.


Zero-days are moderately serious vulnerabilities that are mitigated by configuration management procedures.

Answer 1

Zero-days are vulnerabilities that require immediate attention and must be tracked in a dashboard.

Explanation: A zero-day has no vendor patch or prior public fix and may be actively exploitable, so it needs urgent mitigation, monitoring, and visibility (tracking/reporting) until a fix is available.