What is an attack that exploits computer application vulnerabilities before patches are released called?

• A. Cyber Kill Chain
• B. Zero-Day Attack
• C. Electronic Warfare
• D. Cyberwarfare

Answer: (B)

The main idea here is exploiting a flaw that defenders have no patch for yet. This kind of attack happens when a vulnerability is unknown to the vendor and a patch hasn’t been released, so attackers can weaponize and use it before a fix exists. That window—when there’s zero time for defenders to apply a patch—is why it’s called a zero-day attack. It’s not about a framework of attack steps, nor about military-scale operations; those other terms describe different concepts. So the best-fit description for this scenario is a zero-day attack, highlighting the exploit that takes advantage of an unpatched vulnerability before a patch is available.