A Security Analyst Was Provided with a Detailed Penetration Report

question 17

Multiple Choice

A security analyst was provided with a detailed penetration report, which was performed against the organization's DMZ environment. It was noted on the report that a finding has a CVSS base score of 10.0. Which of the following levels of difficulty would be required to exploit this vulnerability?

• A) Very difficult; perimeter systems are usually behind a firewall.
• B) Somewhat difficult; would require significant processing power to exploit.
• C) Trivial; little effort is required to exploit this finding.
• D) Impossible; external hosts are hardened to protect against attacks.

---

Definitions:

Lurking Variable

A variable that is not directly measured or included in a study but can affect the relationship between the studied variables.

Per Capita Wealth

The average amount of wealth per person in a specific population or area, calculated by dividing total wealth by the population size.

Association

A relationship or connection between two or more variables, where changes in one variable might be related to changes in another.

High School Averages

The mean academic performance score of a student, usually calculated from grades obtained in various subjects while attending high school.