SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

What is needed for a computer system or device to be vulnerable to malware?

1. A Firewall

2. An Operating system

3. A Strong password

4. Antivirus software

The correct answer is: An Operating system

For a computer system or device to be vulnerable to malware, the presence of an operating system is essential. An operating system (OS) serves as the platform that manages hardware and software resources on the device. Every operating system has inherent vulnerabilities, which can be exploited by malware if the system is not properly secured or updated. Without an operating system, there would be no environment in which malware could operate. Malware is specifically designed to target systems and applications running on an OS, and thus it is a crucial component in the context of vulnerability. While firewalls, strong passwords, and antivirus software are important security measures that help protect against malware infections, the existence of an operating system is the foundational requirement upon which vulnerabilities can be exploited.