Question: A cybersecurity analyst uses the Common Vulnerability Scoring System ( CVSS ) to evaluate the severity of a vulnerability in a company's software. When using
A cybersecurity analyst uses the Common Vulnerability Scoring System CVSS to evaluate the severity of a vulnerability in a company's software.
When using the CVSS to evaluate the severity of a software vulnerability, what specific factors should the analyst consider, and why is CVSS an important tool for IT teams to use? Select two.
Type of vulnerability, affected system, and potential impact; to prioritize remediation efforts
Likelihood of exploitation, potential impact, and patch availability; to provide an objective measure of risk
Cost of fixing, number of systems affected, and potential impact; to provide a standardized method for assessing severity
Severity, number of systems affected, and potential impact; to allocate resources more effectively
Provides detailed information about each vulnerability
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
