QUESTION 8 Some organizations don\'t set up their computers for automatic update

Question

QUESTION 8 Some organizations don't set up their computers for automatic updates because such updates may require administrative pri vileges. So, they do the updates during off hours or in case of emergency. The automatic updates could install malware. Ois not the same thing as patching, so they have no use really. could be better for patching of OS than non-automatic updates as they narrow down the vulnerability window do not have any patches. QUESTION 9 0-day vulnerabilities should be checked for a patch on NVD. Odo not have a patch. are due to buffer overflow. can't result in attacks. QUESTION 10 10 Kernel space vulnerabilities are in general more dangerous than user space vulnerabilities because a break into kernel can expose device drivers and OS modules. True False

Explanation / Answer

A8- "could be better for patching of OS than non-automatic updates as they narrow down the vulnerability window"

automatic updates can help to ensure that your software is protected against the latest security vulnerabilities and other security loopholes.

A9- "Do not have a patch."

The term ‘zero-day’ refers to an unknown software vulnerability that the developer is newly aware of, and thus an official patch or update to fix the issue has not been released. Essentially, ‘zero-day’ refers to the fact that the developers have “zero days” to fix the problem that has just been exposed—and perhaps already exploited by hackers

A10-True

kernel mode is generally takes care of the lowest-level, most trusted functions of the operating system. Crashes in  kernel mode are hence very dangerous as they can even halt the entire computer. In user mode the executing code has no ability to directly access hardware or reference memory, hence a kernel vulnerability is more dangerous then a user space vulnerability.

Related Questions

Navigate

• Browse (All)
• Browse Q
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.