nerdexam
EC-Council

312-50V13 · Question #532

A cybersecurity analyst in an organization is using the Common Vulnerability Scoring System to assess and prioritize identified vulnerabilities in their IT infrastructure. They encountered a…

The correct answer is D. The vulnerability has an overall high severity, the likelihood of exploitability is increasing over. With a CVSS Base Score of 7 (High), a Temporal Score of 8 (indicating high current exploitability), and an Environmental Score of 5, the vulnerability has an overall high severity, its likelihood of exploitability is currently high or increasing, and its impact within the…

Submitted by wei.xz· Mar 6, 2026Vulnerability Analysis

Question

A cybersecurity analyst in an organization is using the Common Vulnerability Scoring System to assess and prioritize identified vulnerabilities in their IT infrastructure. They encountered a vulnerability with a base metric score of 7, a temporal metric score of 8, and an environmental metric score of 5. Which statement best describes this scenario?

Options

  • AThe vulnerability has a medium severity with a high likelihood of exploitability over time and a
  • BThe vulnerability has a medium severity with a diminishing likelihood of exploitability over time,
  • CThe vulnerability has an overall high severity with a diminishing likelihood of exploitability over
  • DThe vulnerability has an overall high severity, the likelihood of exploitability is increasing over

How the community answered

(65 responses)
  • A
    25% (16)
  • B
    14% (9)
  • C
    6% (4)
  • D
    55% (36)

Why each option

With a CVSS Base Score of 7 (High), a Temporal Score of 8 (indicating high current exploitability), and an Environmental Score of 5, the vulnerability has an overall high severity, its likelihood of exploitability is currently high or increasing, and its impact within the specific environment is also considered high enough to contribute to the overall high severity.

AThe vulnerability has a medium severity with a high likelihood of exploitability over time and a

A Base Score of 7 (out of 10) is categorized as 'High' severity, not medium.

BThe vulnerability has a medium severity with a diminishing likelihood of exploitability over time,

A Base Score of 7 is 'High' severity, not medium, and a high Temporal Score (8) indicates a *high* or increasing likelihood of exploitability, not diminishing.

CThe vulnerability has an overall high severity with a diminishing likelihood of exploitability over

While the overall severity is high, a high Temporal Score (8) indicates high or increasing likelihood of exploitability, not diminishing likelihood.

DThe vulnerability has an overall high severity, the likelihood of exploitability is increasing overCorrect

A CVSS Base Score of 7 indicates high severity. A Temporal Score of 8 suggests the vulnerability is highly exploitable or exploitability is increasing. An Environmental Score, even at 5, when combined with high base and temporal scores, often contributes to an overall assessment of high severity and impact within the organization's specific context.

Concept tested: CVSS scoring interpretation

Source: https://nvd.nist.gov/vuln-metrics/cvss

Topics

#CVSS#vulnerability scoring#vulnerability analysis#risk assessment

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice