1. Home
2. All questions
3. Question 566

CompTIA Security+ study material · question 566 of 611

Why can a medium-severity vulnerability legitimately outrank a high-severity one in a remediation queue?

• Risk management
• Vulnerabilities

1. Because severity scores expire after ninety days
2. Because medium findings are cheaper to fix
3. Because high findings are usually false positives
4. Because evidence of active exploitation changes the likelihood term in the risk

Challenge yourself on this topic → Study as cards