Cisco Cybersecurity Essentials 25.2

Multiple Choice

Why is it important for organizations to use a standardized vulnerability scoring system like CVSS?

• It ensures consistency in assessing risks across different organizations.

• It makes vulnerabilities harder to detect.

• It prevents organizations from sharing information.

• It increases the complexity of security protocols.

Multiple Choice

Which metric group in CVSS allows adjustment of metrics that are less relevant to what an organization does?

• Base Metric Group

• Temporal Metric Group

• Environmental Metric Group

• Impact Metric Group

Multiple Choice

Which of the following is NOT a metric group used in CVSS assessments?

• Base Metric Group

• Temporal Metric Group

• Impact Metric Group

• Environmental Metric Group

Multiple Select

Select all metrics that are part of the CVSS Base Metric Group Exploitability metrics.

• Attack Vector

• Attack Complexity

• Privileges Required

• Confidentiality Impact

Multiple Select

Select all metrics that are part of the CVSS Base Metric group.

• Attack Vector

• Temporal Impact

• Integrity Impact

• Availability Impact

Multiple Choice

Which metric in the CVSS Base Score group describes how the vulnerability can be exploited, and what are its possible values?

• Attack Vector (Network, Adjacent, Local, Physical)

• Attack Complexity (Low, High)

• Privileges Required (None, Low, High)

• User Interaction (None, Required)

Multiple Choice

What is the CVSS score range for a vulnerability rated as 'Medium'?

• 0.1 - 3.9

• 4.0 - 6.9

• 7.0 - 8.9

• 9.0 - 10.0

Multiple Choice

What are the main benefits of using the Common Vulnerability Scoring System (CVSS) in organizations?

• It provides standardized vulnerability scores, an open framework for metrics, and helps prioritize risk.

• It eliminates all vulnerabilities automatically.

• It only works for hardware vulnerabilities.

• It is only accessible to security professionals.