CAS-005 Question #463: Real Exam Question with Answer & Explanation

The correct answer is C: CVSS. The Common Vulnerability Scoring System (CVSS) provides a standardized severity score for each vulnerability, reflecting its potential impact and exploitability. By sorting your scan results by CVSS score, focusing first on the highest-severity (e.g., critical and high) issues, y

Submitted by paula_co· Mar 6, 2026Governance, Risk, and Compliance

Question

A security administrator needs to develop a remediation plan to address a large number of vulnerability scan results. Which of the following should the administrator use to determine the vulnerabilities that should be addressed first?

Options

ACPE
BCCE
CCVSS
DCVE

Explanation

The Common Vulnerability Scoring System (CVSS) provides a standardized severity score for each vulnerability, reflecting its potential impact and exploitability. By sorting your scan results by CVSS score, focusing first on the highest-severity (e.g., critical and high) issues, you ensure your remediation plan targets the most dangerous vulnerabilities before lower-risk ones.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice Browse All CAS-005 Questions