Gabriel is trying to understand the metrics behind the scores that Nessus uses. He asks you which of the metrics is based on the attacker having to gather more information about the target before the vulnerability can be exploited. Which of the following identifies the metric he described?
A) Scope
B) Privileges required
C) Attack vector
D) Attack complexity

Question

Quizplus · Accepted Answer

Attack complexity refers to the metric that measures how much effort and conditions outside the attacker's control are necessary to exploit the vulnerability. In this case, it includes the need for the attacker to gather more information about the target, making it more complex to exploit.

Gabriel Is Trying to Understand the Metrics Behind the Scores