nerdexam
Cisco

210-250 · Question #100

According to the common vulnerability scoring system, which term is associated with scoring multiple vulnerabilities that are exploit in the course of a single attack?

The correct answer is C. Vulnerability chaining. Vulnerability chaining in CVSS describes exploiting multiple vulnerabilities in sequence within a single attack to achieve greater impact.

Threats and Vulnerabilities

Question

According to the common vulnerability scoring system, which term is associated with scoring multiple vulnerabilities that are exploit in the course of a single attack?

Exhibit

210-250 question #100 exhibit

Options

  • Achained score
  • Brisk analysis
  • CVulnerability chaining
  • Dconfidentiality

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    90% (36)
  • D
    5% (2)

Why each option

Vulnerability chaining in CVSS describes exploiting multiple vulnerabilities in sequence within a single attack to achieve greater impact.

Achained score

Chained score is not a defined or recognized term within the CVSS specification.

Brisk analysis

Risk analysis is a broader process of identifying and evaluating risks, not a CVSS-specific term for combining exploits.

CVulnerability chainingCorrect

Vulnerability chaining is a recognized CVSS concept where an attacker leverages multiple vulnerabilities in combination during a single attack path, with one vulnerability enabling the privilege or access needed to exploit the next. The CVSS specification provides guidance on how to handle scoring when vulnerabilities are chained together in this manner.

Dconfidentiality

Confidentiality is one of the three CIA triad impact metrics used in CVSS scoring, not a term describing the chaining of multiple exploits.

Concept tested: CVSS vulnerability chaining scoring concept

Source: https://www.first.org/cvss/specification-document

Topics

#CVSS#vulnerability chaining#vulnerability scoring#exploit chain

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice