CS0-003 · Question #470
A security analyst needs to identify a computer based on the following requirements to be mitigated: - The attack method is network-based with low complexity. - No privileges or user action is…
The correct answer is D. Computer4. To match the mitigation criteria, we analyze each machine's CVSS (Common Vulnerability Scoring System) attributes: Attack Vector (AV): N for network (matches the requirement of network-based attack). Attack Complexity (AC): L for low (meets the requirement for low complexity)…
Question
A security analyst needs to identify a computer based on the following requirements to be mitigated:
- The attack method is network-based with low complexity.
- No privileges or user action is needed.
- The confidentiality and availability level is high, with a low
integrity level. Given the following CVSS 3.1 output:
Computer1: CVSS3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H Computer2: CVSS3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H Computer3: CVSS3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H Computer4: CVSS3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H Which of the following machines should the analyst mitigate?
Options
- AComputer1
- BComputer2
- CComputer3
- DComputer4
How the community answered
(34 responses)- A9% (3)
- B26% (9)
- C15% (5)
- D50% (17)
Explanation
To match the mitigation criteria, we analyze each machine's CVSS (Common Vulnerability Scoring System) attributes: Attack Vector (AV): N for network (matches the requirement of network-based attack). Attack Complexity (AC): L for low (meets the requirement for low complexity). Privileges Required (PR): N for none (indicating no privileges are needed). User Interaction (UI): N for none (matches the requirement that no user action is needed). Confidentiality (C), Integrity (I), and Availability (A): Requires high confidentiality and availability with low integrity.
Topics
Community Discussion
No community discussion yet for this question.