SY0-701 · Question #667
Which of the following can best contribute to prioritizing patch applications?
The correct answer is A. CVSS. CVSS (Common Vulnerability Scoring System) is correct because it assigns numerical severity scores (0–10) to vulnerabilities based on factors like exploitability, impact, and attack complexity - giving security teams a quantifiable basis for deciding which patches to apply…
Question
Which of the following can best contribute to prioritizing patch applications?
Options
- ACVSS
- BSCAP
- COSINT
- DCVE
How the community answered
(56 responses)- A89% (50)
- B2% (1)
- C5% (3)
- D4% (2)
Explanation
CVSS (Common Vulnerability Scoring System) is correct because it assigns numerical severity scores (0–10) to vulnerabilities based on factors like exploitability, impact, and attack complexity - giving security teams a quantifiable basis for deciding which patches to apply first.
CVE (D) is a tempting distractor because it catalogs known vulnerabilities by unique ID, but it only identifies them - it doesn't score or rank them for urgency. SCAP (B) is a broader automation framework for vulnerability management that uses CVSS scores but isn't itself a prioritization tool. OSINT (C) is an intelligence-gathering methodology for collecting publicly available information and has no direct role in patch prioritization workflows.
Memory tip: Think "CVSS = Criticality Values for Sorting Severity." CVE tells you what the vulnerability is; CVSS tells you how bad it is - and you can't prioritize without knowing how bad something is.
Topics
Community Discussion
No community discussion yet for this question.