CompTIA · CySA+ CS0-004
Prioritizing vulnerabilities
CySA+ CS0-004 · Lesson 14 of 22 · 1:58:23
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CySA+ CS0-004 exam (CompTIA Cybersecurity Analyst (CySA+)). In this lesson: exploitability, active exploitation, asset value, impact, and patch availability, CVSS version 4.0 metric groups and ratings, EPSS, known exploited vulnerability catalogs, true and false positives and negatives, and context: internal, external, or isolated. Includes three original practice questions.
Preview the topics
- Two vulnerabilities have the same CVSS base score of 8.1. One is on the internet-facing online banking server and is exploited in the wild, the other is on an isolated lab server. Which should be fixed first?
- A web server reports a critical vulnerability in an old software version, but the server was patched last week, and only the version banner still shows the old number. How should the analyst classify this finding?
- Flaw 1: CVSS 9.8, EPSS 0.2%, only on a server isolated from all networks. Flaw 2: medium, on the VPN gateway, EPSS 90%, in a known exploited catalog. Which should come first?