A security analyst is analyzing two vulnerabilities on a critical router. The analyst must choose only one to patch during this maintenance window. Given the following information: Vulnerability 1 has not received a CVSS score. The vulnerability has the following characteristics:
• Must be logged in to the router, but elevated privileges are not required
• Trivial to exploit, but user interaction is needed
• Low impact to availability, but high impact to confidentiality and integrity Vulnerability 2 has a CVSS score of AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H Which of the following conclusions should the analyst reach?
Select one answer.
Purchase Full Access to view answer options & explanation
The first 161 questions in this bank are completely free. Unlock Full Access on the exam page to view all answer choices, verified answers, explanations, and community discussions for all 534 questions.
