A Penetration Tester Delivers a Web Application Vulnerability Scan Report

question 123

Multiple Choice

A penetration tester delivers a web application vulnerability scan report to a client. The penetration tester rates a vulnerability as medium severity. The same vulnerability was reported as a critical severity finding on the previous report. Which of the following is the MOST likely reason for the reduced severity?

• A) The client has applied a hot fix without updating the version.
• B) The threat landscape has significantly changed.
• C) The client has updated their codebase with new features.
• D) Thera are currently no known exploits for this vulnerability.

---

Definitions:

Market Price

The current market rate for transactions involving an asset or service.

Strike Price

The determined price point where the possessor of a call option has the right to buy, or in a put option scenario, to sell the asset in question.

Put Option

A financial contract giving the buyer the right, not the obligation, to sell an asset at a specified price within a specified time.

Market Price

The present cost at which a good or service can be purchased or sold.