312-50V13 · Question #532
A cybersecurity analyst in an organization is using the Common Vulnerability Scoring System to assess and prioritize identified vulnerabilities in their IT infrastructure. They encountered a…
The correct answer is D. The vulnerability has an overall high severity, the likelihood of exploitability is increasing over. With a CVSS Base Score of 7 (High), a Temporal Score of 8 (indicating high current exploitability), and an Environmental Score of 5, the vulnerability has an overall high severity, its likelihood of exploitability is currently high or increasing, and its impact within the…
Question
Options
- AThe vulnerability has a medium severity with a high likelihood of exploitability over time and a
- BThe vulnerability has a medium severity with a diminishing likelihood of exploitability over time,
- CThe vulnerability has an overall high severity with a diminishing likelihood of exploitability over
- DThe vulnerability has an overall high severity, the likelihood of exploitability is increasing over
How the community answered
(65 responses)- A25% (16)
- B14% (9)
- C6% (4)
- D55% (36)
Why each option
With a CVSS Base Score of 7 (High), a Temporal Score of 8 (indicating high current exploitability), and an Environmental Score of 5, the vulnerability has an overall high severity, its likelihood of exploitability is currently high or increasing, and its impact within the specific environment is also considered high enough to contribute to the overall high severity.
A Base Score of 7 (out of 10) is categorized as 'High' severity, not medium.
A Base Score of 7 is 'High' severity, not medium, and a high Temporal Score (8) indicates a *high* or increasing likelihood of exploitability, not diminishing.
While the overall severity is high, a high Temporal Score (8) indicates high or increasing likelihood of exploitability, not diminishing likelihood.
A CVSS Base Score of 7 indicates high severity. A Temporal Score of 8 suggests the vulnerability is highly exploitable or exploitability is increasing. An Environmental Score, even at 5, when combined with high base and temporal scores, often contributes to an overall assessment of high severity and impact within the organization's specific context.
Concept tested: CVSS scoring interpretation
Source: https://nvd.nist.gov/vuln-metrics/cvss
Topics
Community Discussion
No community discussion yet for this question.