Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 177

Which two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two.)

Answer options

• A. malware
• B. denial-of-service attacks
• C. ARP spoofing
• D. exploits
• E. eavesdropping

Correct answer: A, D

Explanation

Without a robust patching solution, endpoints remain vulnerable to malware and exploits, as outdated software can be easily targeted by attackers. Other options, while they represent security risks, are not directly associated with the lack of patches; for example, denial-of-service attacks and ARP spoofing do not necessarily stem from unpatched vulnerabilities.