CompTIA
CS0-003 · Question #393
A security manager is looking at a third-party vulnerability metric (SMITTEN) to improve upon the company's current method that relies on CVSSv3. Given the following: Which of the following…
The correct answer is B. Vulnerability 2. Vulnerability 2 should be prioritized as it is exploitable, has high exploit activity, and is exposed externally according to the SMITTEN metric.
Submitted by parkjh· Mar 6, 2026Vulnerability Management
Question
A security manager is looking at a third-party vulnerability metric (SMITTEN) to improve upon the company's current method that relies on CVSSv3. Given the following:
Which of the following vulnerabilities should be prioritized?
Exhibit
Options
- AVulnerability 1
- BVulnerability 2
- CVulnerability 3
- DVulnerability 4
How the community answered
(30 responses)- A3% (1)
- B80% (24)
- C13% (4)
- D3% (1)
Explanation
Vulnerability 2 should be prioritized as it is exploitable, has high exploit activity, and is exposed externally according to the SMITTEN metric.
Topics
#vulnerability prioritization#CVSS#risk metrics#vulnerability management
Community Discussion
No community discussion yet for this question.