Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
CVSS has the highest priority over vulnerability state (active or resurface) even if the scanner is bad when you see a cvss of 10 that should be the 1st point of call at least to verify if it is true positive or false positive. please lets take note of this
The correct answer is C. Redis Server. While Oracle JDK has a critical CVSS, it's resurfaced, which usually means it's already been seen and acknowledged, possibly even mitigated before. The Redis Server is active, meaning it’s currently unaddressed and exploitable in the present state, and it has a CVSS of 7.5, which makes it high-risk under most SLAs. It’s also been open for 43 days, so it’s pressing to resolve before breaching time limits.
do not overthink, CompTIA will spank you!