A server is missing a critical patch, but no attack has occurred yet. What should the learner identify first?

A trainee is matching terms and sees a weakness in software or configuration that attackers could ab...

A learner sees code or a method used to take advantage of a known weakness. Which term fits?...

A proof-of-concept uses a bug to gain unauthorized access. What should the learner call the proof-of...

A defender is organizing reconnaissance, intrusion, control, and objective-focused activity into a s...

A user is tricked by a convincing message into revealing credentials. Which common attack type best ...