CompTIA SecurityX (CAS-005) — Question 47

A security analyst is using data provided from a recent penetration test to calculate CVSS scores to prioritize remediation. Which of the following metric groups would the analyst need to determine to get the overall scores? (Choose three.)

Answer options

• A. Temporal
• B. Availability
• C. Integrity
• D. Confidentiality
• E. Base
• F. Environmental
• G. Impact
• H. Attack vector

Correct answer: A, E, F

Explanation

The correct answer includes Temporal, Base, and Environmental metrics, as these are essential for calculating the overall CVSS score. The other options such as Availability, Integrity, and Confidentiality relate to the impact but are not part of the main metric groups needed for the CVSS score calculation.