Study. uk . com
  1. Home
  2. All questions
  3. Question 106

CompTIA Security+ study material · question 106 of 611

A flaw the organisation has been carrying quietly for months is published in a security advisory. What changes about the risk?

  1. Nothing changes until a proof of concept is released
  2. The likelihood rises because attackers now have a reason to build an exploit
  3. The vulnerability is automatically reclassified as a zero day
  4. The impact rises because more data is now exposed
Show the answer

Answer: B. The likelihood rises because attackers now have a reason to build an exploit

Public disclosure does not change the flaw, but it changes how many people know to look for it.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 2.1 Risk Responses

Challenge yourself on this topic → Study as cards