Exam 200-201 topic 1 question 262 discussion

A. scope is the CVSS metric group that identifies other components that are affected by a successful security attack. The CVSS (Common Vulnerability Scoring System) is a standardized method for evaluating and scoring the severity of security vulnerabilities in software and systems. The scope metric group is used to determine the extent to which other resources or systems may be impacted by a successful attack. If the attack only affects the targeted system, it has a limited scope, while if it affects other systems, it has a wider scope. B. privileges required identifies the level of access or privileges that an attacker must have in order to execute an attack. C. integrity refers to the impact that a successful attack could have on the integrity of the targeted data or system. D. attack vendor is not a metric group in CVSS.