A user clicked an email link that led to a website than infected the workstation with a virus. The virus encrypted all the network shares to which the user had access. The virus was not deleted or blocked by the company's email filter, website filter, or antivirus. Which of the following describes what occurred?
A) The user's account was over-privileged.
B) Improper error handling triggered a false negative in all three controls.
C) The email originated from a private email server with no malware protection.
D) The virus was a zero-day attack.

Question

Quizplus · Accepted Answer

A zero-day attack refers to a new and previously unknown vulnerability that is exploited before security measures can detect or block it, which explains why the virus bypassed the company's defenses.

A User Clicked an Email Link That Led to a Website