Study. uk . com
  1. Home
  2. All questions
  3. Question 128

CompTIA Security+ study material · question 128 of 611

What did CVSS v4.0 replace the older Scope metric with?

  1. Separate impact metrics for the vulnerable system and subsequent systems
  2. The Attack Requirements metric
  3. A single combined impact score
  4. An environmental modifier
Show the answer

Answer: A. Separate impact metrics for the vulnerable system and subsequent systems

Separating the two makes downstream consequence, including human safety, explicit rather than folded into one flag.

Source: CVSS v4.0 specification (FIRST) — CVSS v4.0 Specification Document › Metrics

Challenge yourself on this topic → Study as cards