Free CompTIA Security+ SY0-601 Practice Question
A cybersecurity analyst is assessing various security vulnerabilities that have been identified in an organization's software. The analyst needs to prioritize the remediation of these vulnerabilities based on the potential impact to the organization's systems. Which of the following would provide the BEST metric for the analyst to determine the severity of the vulnerabilities?
Open Web Application Security Project (OWASP)
Annual loss expectancy (ALE) calculations based on risk analysis
Common Vulnerability Scoring System (CVSS)
Vulnerability database search by CVE identifier
This question's topic:
CompTIA Security+ SY0-601 /
Attacks, Threats, and Vulnerabilities
SAVE $49