Study. uk . com
  1. Home
  2. All questions
  3. Question 120

CompTIA Security+ study material · question 120 of 611

Which CVSS metric group changes as proof-of-concept exploit code becomes publicly available?

  1. Threat
  2. Base
  3. Environmental
  4. Supplemental
Show the answer

Answer: A. Threat

Base metrics are constant over time. Threat metrics move with exploit availability and observed exploitation.

Source: CVSS v4.0 specification (FIRST) — CVSS v4.0 Specification Document › Metrics

Challenge yourself on this topic → Study as cards