The DMV still runs public-facing Windows 7 kiosks that are joined to the staff network and no longer receive vendor security updates. Which attack-surface concern does this primarily represent?
Select an answer to reveal the explanation.
Short Explanation
Windows 7 kiosks still on the staff LAN are unsupported systems — no vendor patches means a permanently elevated attack surface. That is not a fake-audit phone call or a stego map file. Retire, isolate, or replace end-of-support endpoints before they become easy footholds.
Full Explanation
Unsupported or end-of-life systems and applications are an explicit SY0-701 threat vector because they no longer receive security updates while remaining reachable. Objective 2.2 treats unsupported systems/applications as an attack surface distinct from social engineering or image-based delivery. Watering-hole, pretexting, and steganography scenarios describe other vectors. Municipal DMV kiosks on staff VLANs should be segmented, replaced, or tightly compensating-controlled.