A client needs to be PCI compliant and has external-facing web servers. Which of the following CVSS vulnerability scores would automatically bring the client out of compliance standards such as PCI 3.x?
A) 2.9
B) 3.0
C) 4.0
D) 5.9

Question

Quizplus · Accepted Answer

A CVSS score of 4.0 or higher is considered a critical vulnerability and would automatically bring a client out of compliance with PCI 3.x standards.

A Client Needs to Be PCI Compliant and Has External-Facing