Exam CS0-002 topic 1 question 350 discussion

Actual exam question from CompTIA's CS0-002

Question #: 350
Topic #: 1

An organization is performing a risk assessment to prioritize resources for mitigation and remediation based on impact. Which of the following metrics, in addition to the CVSS for each CVE, would best enable the organization to prioritize is efforts?

A. OS type
B. OS or application versions
C. Patch availability
D. System architecture
E. Mission criticality

Show Suggested Answer

Suggested Answer: E 🗳️

by CyberCEH at May 19, 2023, 2:30 p.m.

Comments

Submit Cancel

skibby16

1 year, 7 months ago

Selected Answer: C

Patch availability: This metric indicates whether there is a fix or update available for the vulnerability from the vendor or developer. Patch availability can affect the urgency and feasibility of remediation, as well as the risk exposure and potential damage of exploitation. For example, a vulnerability with a high CVSS score but with a readily available patch may be less critical than a vulnerability with a lower CVSS score but with no patch available3.

upvoted 1 times

...

JakeH

1 year, 8 months ago

On exam

upvoted 1 times

...

tutita

2 years ago

Selected Answer: E

A mission critical factor of a system is any factor (component, equipment, personnel, process, procedure, software, etc.) that is essential to business operation or to an organization. Failure or disruption of mission critical factors will result in serious impact on business operations or upon an organization

upvoted 3 times

...

AmirSA92

2 years ago

Selected Answer: E

Correct

upvoted 2 times

...

CyberCEH

2 years, 1 month ago

Answer E

upvoted 2 times

...