1. Home
2. All questions
3. Question 132

CompTIA Security+ study material · question 132 of 611

Why does FIRST require a CVSS vector string to be published alongside the numeric score?

• Vulnerabilities

1. So readers can see how the score was derived
2. So the score can be compared to a CVE identifier
3. So the score can be recalculated for a different version of CVSS
4. So the vendor can be identified

Challenge yourself on this topic → Study as cards