Sam is working as a system administrator In an organization. He captured the principal characteristics of a vulnerability and produced a numerical score to reflect Its severity using CVSS v3.0 to…

Question

Options

• AMedium
• BLow
• CCritical
• DHigh

• A
  92% (24)
• B
  4% (1)
• C
  4% (1)

Explanation

CVSS v3.0 Severity Ratings Explained

Option A (Medium) is correct because in CVSS v3.0, a base score of 4.0 falls within the Medium severity range of 4.0–6.9. Sam's score of exactly 4.0 sits at the lower boundary of Medium, making it the appropriate classification for this vulnerability.

The other options are incorrect based on the official CVSS v3.0 scoring ranges: Low covers scores of 0.1–3.9 (Sam's score is just above this threshold), High covers 7.0–8.9 (well above Sam's score), and Critical covers 9.0–10.0 (reserved for the most severe vulnerabilities, far exceeding Sam's 4.0).

Memory Tip: Use the acronym "None Leaves My House Critical" to remember the ranges:

• None = 0.0
• Low = 0.1–3.9
• Medium = 4.0–6.9
• High = 7.0–8.9
• Critical = 9.0–10.0

Think of it as a school grading scale - a 4.0 is passing (Medium), not failing (Low) or excelling (High/Critical).

No community discussion yet for this question.