CS0-003 · Question #203
A vulnerability analyst received a list of system vulnerabilities and needs to evaluate the relevant impact of the exploits on the business. Given the constraints of the current sprint, only three…
The correct answer is A. AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L - Base Score 6.0. This option represents the least impactful risk because it has the lowest base score among the four options, and it also requires high privileges, user interaction, and high attack complexity to exploit, which reduces the likelihood of a successful attack.
Question
A vulnerability analyst received a list of system vulnerabilities and needs to evaluate the relevant impact of the exploits on the business. Given the constraints of the current sprint, only three can be remediated. Which of the following represents the least impactful risk, given the CVSS3.1 base scores?
Options
- AAV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L - Base Score 6.0
- BAV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L - Base Score 7.2
- CAV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H - Base Score 6.4
- DAV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L - Base Score 6.5
How the community answered
(30 responses)- A47% (14)
- B10% (3)
- C30% (9)
- D13% (4)
Explanation
This option represents the least impactful risk because it has the lowest base score among the four options, and it also requires high privileges, user interaction, and high attack complexity to exploit, which reduces the likelihood of a successful attack.
Topics
Community Discussion
No community discussion yet for this question.