exam questions

Exam CS0-003 All Questions

View all questions & answers for the CS0-003 exam

Exam CS0-003 topic 1 question 115 discussion

Actual exam question from CompTIA's CS0-003
Question #: 115
Topic #: 1
[All CS0-003 Questions]

A security analyst reviews the latest vulnerability scans and observes there are vulnerabilities with similar CVSSv3 scores but different base score metrics. Which of the following attack vectors should the analyst remediate first?

  • A. CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • B. CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • C. CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • D. CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
VVV4WIN
Highly Voted 9 months, 2 weeks ago
Selected Answer: C
(N)etwork>(A)djacent>(L)ocal>(P)hysical
upvoted 23 times
leesuh
1 week, 1 day ago
"NALP"
upvoted 1 times
...
...
greatsparta
Most Recent 9 months ago
Selected Answer: C
AV:N (Network): The vulnerability is exploited remotely, and an attacker does not require any access to the target system. This often involves attacks over a network.
upvoted 3 times
...
dido80
9 months, 2 weeks ago
Selected Answer: C
AV:N (N)etwork SO ANSWER IS C
upvoted 3 times
...
chaddman
10 months, 2 weeks ago
Generally speaking, vulnerabilities that are exploitable over the network (AV:N) are often considered the most urgent to remediate because they can be exploited by any attacker who can reach the system over the network. So, in this case, the analyst should prioritize remediating the vulnerability with the vector CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (Option C), as it can be exploited from the network and therefore poses a higher risk of being exploited by a remote attacker.
upvoted 4 times
...
kmordalv
1 year ago
Selected Answer: C
When reviewing vulnerabilities with similar CVSSv3 scores, it's essential to consider the attack vectors and the potential impact on the organization. Looking at all the values, the only one that changes is AV (Attack Vector). According to criticality, the order would be as follows: C, B, D, A The security analyst should focus more on an attack coming from the Network (C). The other options (A,B,D) require the vulnerability to be exploited within the internal network.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago