Which three items are included in the base metric group used by CVSS? (Choose three.)
- attack complexity
- integrity impact
- modified base metrics
- user interaction
- availability requirements
- remediation level
Explanation: CVSS uses three metric groups in determining scores. The Base metric group includes exploitability metrics (for example, attack vector, attack complexity, privileges required, user interaction) and impact metrics (confidentiality impact, integrity impact, availability impact).
Exam with this question: 9.5.3 Quiz - Reporting and Communication Answers
Please login or Register to submit your answer