CompTIA CASP+ (CAS-004) — Question 194

A security analyst is using data provided from a recent penetration test to calculate CVSS scores to prioritize remediation. Which of the following metric groups would the analyst need to determine to get the overall scores? (Choose three.)

Answer options

• A. Temporal
• B. Availability
• C. Integrity
• D. Confidentiality
• E. Base
• F. Environmental
• G. Impact
• H. Attack vector

Correct answer: A, E, F

Explanation

The correct metrics to calculate the overall CVSS scores are Temporal, Base, and Environmental. Temporal metrics assess the current state of exploitability, Base metrics provide the fundamental characteristics of the vulnerability, and Environmental metrics account for specific organizational factors. The other options, while related to security, do not contribute directly to the CVSS score calculation.