SY0-701 · Question #684
Which of the following is a use of CVSS?
The correct answer is D. To prioritize the remediation of vulnerabilities. CVSS (Common Vulnerability Scoring System) is a standardized framework that assigns numerical severity scores (0–10) to vulnerabilities, enabling security teams to prioritize which vulnerabilities to fix first based on their potential impact - making D correct. Why the…
Question
Which of the following is a use of CVSS?
Options
- ATo determine the cost associated with patching systems
- BTo identify unused ports and services that should be closed
- CTo analyze code for defects that could be exploited
- DTo prioritize the remediation of vulnerabilities
How the community answered
(24 responses)- A4% (1)
- C8% (2)
- D88% (21)
Explanation
CVSS (Common Vulnerability Scoring System) is a standardized framework that assigns numerical severity scores (0–10) to vulnerabilities, enabling security teams to prioritize which vulnerabilities to fix first based on their potential impact - making D correct.
Why the distractors are wrong:
- A - CVSS scores reflect severity, not financial cost; patching budgets require separate cost-benefit analysis tools.
- B - Identifying open ports/services is the job of a port scanner (e.g., Nmap), not a scoring system.
- C - Analyzing code for exploitable defects is static application security testing (SAST), a completely different discipline.
Memory tip: Think of CVSS as a triage nurse in an emergency room - it doesn't treat patients (patch systems), diagnose new problems (scan ports/code), or bill insurance (cost analysis); it simply ranks who needs attention first.
Topics
Community Discussion
No community discussion yet for this question.