Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Option A: Harder to exploit, but potentially causes HIGH damage/impact to confidentiality and integrity. Option D: Easier to exploit, but causes LOW damage/impact to confidentiality, integrity, and availability.
A AV(attack vector):N(Network)- same as all other options, no differentiator AC(attack complexity):H(High)- same as all others, no differentiator PR:H- highest privilege requirement (D has PR:N, easier to exploit) UI:R- user interaction needed (B and D have UI:N) S:U- scope unchanged (B and D have S:C, they break the security boundary) C:H/I:H but A:L- lower availability impact than C, which has A:H
A is the least impactful risk because it has the lowest CVSS v3.1 base score (6.0