Study. uk . com
  1. Home
  2. All questions
  3. Question 58

CompTIA Security+ study material · question 58 of 611

Which two conditions must be met before a vulnerability is added to the Known Exploited Vulnerabilities catalog? Choose two.

  1. Proof-of-concept code published by the vendor
  2. Clear remediation guidance is available
  3. A base score of 9.0 or higher
  4. Reliable evidence of exploitation in the wild
Show the answer

Answer: B. Clear remediation guidance is available
D. Reliable evidence of exploitation in the wild

Entry requires exploitation evidence, a CVE identifier and actionable remediation guidance. There is no score threshold.

Source: CISA Known Exploited Vulnerabilities (KEV) Catalog (CISA) — CISA Known Exploited Vulnerabilities Catalog › Criteria

Challenge yourself on this topic → Study as cards