What is a class of vulnerabilities that are unknown before they are exploited?

Attack Surfaces

Attack Vectors

ACLS

Zero$-$day

Which of these host$-$based firewall rules help to permit network access from a Virtual Private Network $($VPN$)$ subnet?

Secure Shell $($SSH$)$

Group Policy Objects $($GPOs$)$

Active Directory

Access Control Lists $($ACLs$)$

When looking at aggregated logs$,$ you are seeing a large percentage of Windows hosts connecting to an Internet Protocol $($IP$)$ address outside the network in a foreign country. Why might this be worth investigating more closely?

It can indicate what software is on the binary whitelist

It can indicate ACLs are not configured correctly

It can indicate log normalization