MENU
According to CVSS, what is attack complexity?
Suggested Answer: B
Get Premium 200-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
In the Common Vulnerability Scoring System (CVSS), attack complexity refers to the conditions beyond the attacker's control that must exist for the vulnerability to be successfully exploited.
This includes factors such as the need for user interaction, the presence of specific configurations, or network conditions that are not easily controlled by the attacker.
A high attack complexity means that these external factors make exploitation more difficult, while a low attack complexity indicates that fewer such conditions are required.
CVSS v3.1 Specifications Document
Understanding Attack Complexity in Vulnerability Assessments
Cybersecurity Frameworks and Metrics
29 comments · newest first
HE
Heike
11 months ago
Isn't it surprising how complex some vulnerabilities can be?
EL
Elke
11 months ago
I think it’s more about the circumstances affecting the attack.
MI
Michel
11 months ago
Wait, I thought it was about existing exploits?
AN
Angelo
11 months ago
Totally agree, it's all about the steps involved!
JO
Johnna
12 months ago
Attack complexity refers to how many actions an attacker needs to take to exploit a vulnerability.
LE
Leanna
12 months ago
I thought attack complexity was related to how many exploits are out there, but now I'm confused if that's really what A means.
DE
Delmy
1 year ago
I practiced a question similar to this, and I feel like attack complexity is about the existing conditions that affect the attack, which might be B again.
SH
Shalon
1 year ago
I remember something about the number of actions needed to exploit a vulnerability, which sounds like C, but I'm not completely sure.
AL
Aliza
1 year ago
I think attack complexity refers to the circumstances that make it harder for an attacker to exploit a vulnerability, so maybe it's B?
BR
Brandee
1 year ago
This seems straightforward. Attack complexity is about the number of actions the attacker needs to perform, so I'm going to go with option C.
JU
Justine
1 year ago
Okay, I remember learning about this in class. Attack complexity is about the existing circumstances beyond the attacker's control, so I'll select option B.
AS
Ashton
1 year ago
Hmm, I'm a bit confused on this one. I thought attack complexity had to do with the availability of existing exploits, but I'm not totally sure. I'll have to think this through carefully.
ZA
Zana
1 year ago
I'm pretty sure attack complexity refers to the number of steps an attacker needs to take to exploit the vulnerability, so I'll go with option C.
LI
Lina
2 years ago
C is the clear choice here. Although, I do wonder if the exam committee has a dark sense of humor and is actually looking for 'the number of hackers required to successfully exploit the vulnerability' as the answer.
DA
Daisy
2 years ago
Ah, the age-old question of attack complexity. I'd say C is the way to go, unless the exam is trying to trick us. Better not fall for any quantum entanglement shenanigans!
MA
Mariko
2 years ago
I'm not sure, but D sounds plausible, number of patches available for certain attack mitigation and how complex the workarounds are.
LA
Launa
2 years ago
I believe it's A, existing exploits available in the wild exploiting the vulnerability.
WI
Willow
2 years ago
I'm leaning towards B, existing circumstances beyond the attacker's control to exploit the vulnerability.
VA
Valentin
2 years ago
I think it's C, the number of actions an attacker should perform to exploit the vulnerability.
HY
Hyman
2 years ago
D? Nah, that's way too specific. I'm going with C. Seems like the best fit for attack complexity.
JO
Josephine
2 years ago
Hmm, I was leaning towards B, but C makes sense too. Gotta love these tricky CVSS questions!
GR
Gracia
2 years ago
Yeah, that makes sense. It's all about how complex the attack process is.
GO
Goldie
2 years ago
I think it's C, the number of actions an attacker should perform to exploit the vulnerability.
TA
Tamekia
2 years ago
I think it's C. The number of actions an attacker should perform to exploit the vulnerability seems like the most logical answer.
AM
Amber
2 years ago
Actually, it's B. Existing circumstances beyond the attacker's control to exploit the vulnerability.
JE
Jess
2 years ago
I think it's C. The number of actions an attacker should perform to exploit the vulnerability seems like the most logical answer.
SH
Shanice
2 years ago
That makes sense, it's about how difficult it is for the attacker to carry out the attack.
MI
Mignon
2 years ago
I think it's the number of actions an attacker should perform to exploit the vulnerability.
SH
Shanice
2 years ago
What is attack complexity according to CVSS?