1. Home
2. All questions
3. Question 55

CompTIA Security+ study material · question 55 of 611

A vulnerability's base score is taken straight from a public feed and used to rank remediation. What assumption is being carried in unexamined?

• Risk management
• Vulnerabilities

1. That threat and environmental conditions are at their worst case
2. That the vulnerability has been patched by the vendor
3. That the score already includes exploitation evidence
4. That the asset is internet-facing

Challenge yourself on this topic → Study as cards