1. Home
2. All questions
3. Question 54

CompTIA Security+ study material · question 54 of 611

A team uses a vulnerability's CVSS score directly as its risk rating. Which factor does CVSS deliberately exclude that they must add themselves?

• Risk management
• Vulnerabilities

1. Regulatory exposure and monetary loss
2. The affected component's version
3. Attack complexity
4. Privileges required

Challenge yourself on this topic → Study as cards