210-250 · Question #100
According to the common vulnerability scoring system, which term is associated with scoring multiple vulnerabilities that are exploit in the course of a single attack?
The correct answer is C. Vulnerability chaining. Vulnerability chaining in CVSS describes exploiting multiple vulnerabilities in sequence within a single attack to achieve greater impact.
Question
According to the common vulnerability scoring system, which term is associated with scoring multiple vulnerabilities that are exploit in the course of a single attack?
Exhibit
Options
- Achained score
- Brisk analysis
- CVulnerability chaining
- Dconfidentiality
How the community answered
(40 responses)- A3% (1)
- B3% (1)
- C90% (36)
- D5% (2)
Why each option
Vulnerability chaining in CVSS describes exploiting multiple vulnerabilities in sequence within a single attack to achieve greater impact.
Chained score is not a defined or recognized term within the CVSS specification.
Risk analysis is a broader process of identifying and evaluating risks, not a CVSS-specific term for combining exploits.
Vulnerability chaining is a recognized CVSS concept where an attacker leverages multiple vulnerabilities in combination during a single attack path, with one vulnerability enabling the privilege or access needed to exploit the next. The CVSS specification provides guidance on how to handle scoring when vulnerabilities are chained together in this manner.
Confidentiality is one of the three CIA triad impact metrics used in CVSS scoring, not a term describing the chaining of multiple exploits.
Concept tested: CVSS vulnerability chaining scoring concept
Source: https://www.first.org/cvss/specification-document
Topics
Community Discussion
No community discussion yet for this question.
