ExamGecko
Question list
Search
Search

Question 21 - ICS-SCADA Cyber Security discussion

Report
Export

Which of the following are not a part of the temporal score in the CVSS? (Select all that apply.)

A.
Attack Vector
Answers
A.
Attack Vector
B.
User Interaction
Answers
B.
User Interaction
C.
Reporting Confidence
Answers
C.
Reporting Confidence
D.
Remediation Level
Answers
D.
Remediation Level
Suggested answer: A, B

Explanation:

The Common Vulnerability Scoring System (CVSS) provides a way to capture the principal characteristics of a vulnerability and produce a numerical score reflecting its severity.

The temporal score in CVSS adjusts the base score of a vulnerability based on factors that change over time, such as the availability of exploits or the existence of patches.

The temporal score includes:

Remediation Level

Report Confidence

Attack Vector and User Interaction are part of the base score, not the temporal score, as they describe the fundamental characteristics of the vulnerability and do not typically change over time.

Reference

Common Vulnerability Scoring System v3.1: Specification Document.

'Understanding CVSS,' by FIRST (Forum of Incident Response and Security Teams).

asked 18/09/2024
Anthony Zaborski
48 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first