Study. uk . com
  1. Home
  2. All questions
  3. Question 57

CompTIA Security+ study material · question 57 of 611

Two flaws both score 8.8. One appears in the Known Exploited Vulnerabilities catalog. Which should be remediated first and why?

  1. The uncatalogued one, because it is less well understood
  2. Neither, because their scores are identical
  3. The catalogued one, because exploitation evidence raises the likelihood term
  4. Whichever affects more assets, regardless of exploitation
Show the answer

Answer: C. The catalogued one, because exploitation evidence raises the likelihood term

The catalog records flaws attackers are actually using, which changes likelihood in a way severity alone does not.

Source: CISA Known Exploited Vulnerabilities (KEV) Catalog (CISA) — CISA Known Exploited Vulnerabilities Catalog › Overview

Challenge yourself on this topic → Study as cards