Q: 4
A security analyst reviews the latest vulnerability scans and observes there are vulnerabilities with
similar CVSSv3 scores but different base score metrics. Which of the following attack vectors should
the analyst remediate first?
Options
Discussion
C . Network attack vector is always top priority since anyone can hit it remotely. Correct me if I'm missing something.
Not C, B. AV:A can be a problem if your network has lots of adjacent segments, kinda tricky sometimes.
Option C makes sense to hit first since AV:N means remote exploit from anywhere, way more exposure than adjacent (B). I think that's standard triage for network vulnerabilities. Not 100% but C looks most critical.
Option B AV:A (adjacent network) still could be higher risk if VLAN hopping is in play.
B , saw a similar one on a practice test.
B tbh
B . AV:A means adjacent network, so it's riskier than local vectors (like D). Pretty sure C is more urgent but I sometimes mix up AV syntax, so let me know if I'm off.
Yeah, I agree with C here.
C imo, network vector (AV:N) is riskier since attackers can reach it from anywhere without local or physical access. Unless there's something unique about your environment, I'd always prioritize network-exploitable vulns first. Disagree if you see a niche case.
My pick: it's C, saw a similar question on a practice test and network vector (AV:N) always comes first.
Be respectful. No spam.
