Which of the following is a component of the CVSS Environmental, General Modifiers?

Prepare for the PCI Approved Scanning Vendor (ASV) Test. Study with flashcards, multiple choice questions, hints, and explanations. Get exam ready!

Multiple Choice

Which of the following is a component of the CVSS Environmental, General Modifiers?

Explanation:
In CVSS, environmental modifiers adjust the score to reflect how a vulnerability would impact an organization in its specific environment. Collateral Damage Potential is a general modifier used in the Environmental metrics to represent the potential harm to collateral assets or other systems beyond the immediate target if the vulnerability is exploited. This is the best fit because it directly accounts for broader, real‑world damage in the environment, which is exactly what the general modifiers aim to measure. Access Vector and Authentication are tied to the base metrics, describing how the vulnerability can be exploited and what level of access is required, independent of the environment. Target Distribution is another environmental factor, but it’s not categorized as a general modifier in the same way as Collateral Damage Potential.

In CVSS, environmental modifiers adjust the score to reflect how a vulnerability would impact an organization in its specific environment. Collateral Damage Potential is a general modifier used in the Environmental metrics to represent the potential harm to collateral assets or other systems beyond the immediate target if the vulnerability is exploited. This is the best fit because it directly accounts for broader, real‑world damage in the environment, which is exactly what the general modifiers aim to measure.

Access Vector and Authentication are tied to the base metrics, describing how the vulnerability can be exploited and what level of access is required, independent of the environment. Target Distribution is another environmental factor, but it’s not categorized as a general modifier in the same way as Collateral Damage Potential.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy