Nephele is looking at the vulnerabilities found in her organization. She wants to figure out which ones must be present or addressed from the local network compared to the ones that must be addressed either from an adjacent network or other network. Which of the following metrics covers this information?
A) Scope
B) Attack vector
C) Attack complexity
D) User interaction

Question

Quizplus · Accepted Answer

The Attack Vector metric in the Common Vulnerability Scoring System (CVSS) specifies how a vulnerability can be exploited, including whether an attack must be conducted from the local network, an adjacent network, or a remote one. This directly addresses Nephele's need to differentiate vulnerabilities based on their exploitable location.

Nephele Is Looking at the Vulnerabilities Found in Her Organization