An organization uses Common Vulnerability Scoring System (CVSS) scores to prioritize remediation of vulnerabilities. Management wants to modify the priorities based on a difficulty factor so that vulnerabilities with lower CVSS scores may get a higher priority if they are easier to implement with less risk to system functionality. Management also wants to quantify the priority. Which of the following would achieve managements objective?

🎲 Try a Random Question  |  Total Questions in Quiz: 267  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
CompTIA Cybersecurity Analyst Plus CySA+ CS0-001 Questions — practice the complete quiz, review flashcards, or try a random question.

The exam objectives for the CompTIA CySA+ certification exam includes threat management, cyber incident response, vulnerability, and security architecture and tool sets.. The CompTIA CySA+ exam is meant to be combined with PenTest+ to bridge the gap between the CompTIA Security+ exam, which is more generalized and a step-down, and the CompTIA Advanced Security Practitioner (CASP+), which is the highest-level certification that CompTIA offers within the Cybersecurity pathway.  The CompTIA CySA+ is more affordable, in-depth and hands-on than the CEH. The CEH, however, is more well-known and... Show more

An organization uses Common Vulnerability Scoring System (CVSS) scores to prioritize remediation of vulnerabilities.<br/> Management wants to modify the priorities based on a difficulty factor so that vulnerabilities with lower CVSS scores may get a higher priority if they are easier to implement with less<br/> risk to system functionality. Management also wants to quantify the priority. Which of the following would achieve managements objective?