Study. uk . com
  1. Home
  2. All questions
  3. Question 125

CompTIA Security+ study material · question 125 of 611

Exploiting a flaw requires the attacker to win a race condition. In CVSS v4.0, which metric captures this?

  1. Privileges Required
  2. Attack Requirements
  3. User Interaction
  4. Attack Complexity
Show the answer

Answer: B. Attack Requirements

Attack Requirements covers deployment and execution conditions such as a race or a network-path position, distinct from security mechanisms.

Source: CVSS v4.0 specification (FIRST) — CVSS v4.0 Specification Document › Attack Requirements (AT)

Challenge yourself on this topic → Study as cards