CompTIA CS0-003 Exam - Topic 2 Question 59 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 59
Topic #: 2

A cryptocurrency service company is primarily concerned with ensuring the accuracy of the data on one of its systems. A security analyst has been tasked with prioritizing vulnerabilities for remediation for the system. The analyst will use the following CVSSv3.1 impact metrics for prioritization:

Which of the following vulnerabilities should be prioritized for remediation?

Show Suggested Answer

Suggested Answer: B

Vulnerability 2 has the highest impact metrics, specifically the highest attack vector (AV) and attack complexity (AC) values. This means that the vulnerability is more likely to be exploited and more difficult to remediate.

CVSS v3.1 Specification Document, section 2.1.1 and 2.1.2

The CVSS v3 Vulnerability Scoring System, section 3.1 and 3.2

by Lizette at Jun 02, 2026, 02:38 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jade

5 days ago

But what about option C? It has a high exploitability score.

upvoted 0 times

...

Claudio

10 days ago

I agree, D seems critical. Data accuracy is key.

upvoted 0 times

...

Holley

15 days ago

I think we should prioritize option D. High impact on confidentiality.

upvoted 0 times

...

Margurite

20 days ago

I don't know, I feel like 1 might be overlooked.

upvoted 0 times

...

Anika

25 days ago

Vulnerability 2 seems pretty serious too, though.

upvoted 0 times

...

Corinne

1 month ago

Wait, are we sure those metrics are accurate?

upvoted 0 times

...

Claudio

1 month ago

Definitely agree, 4 has the highest impact score!

upvoted 0 times

...

Corazon

1 month ago

I think vulnerability 4 should be the top priority.

upvoted 0 times

...

Emerson

2 months ago

Based on what we studied, I think prioritizing the highest CVSS score makes sense, but I can't remember if there are exceptions we should consider in this scenario.

upvoted 0 times

...

Dierdre

2 months ago

I feel like I need to double-check how the impact metrics work. I think the environmental metrics might also play a role, but I'm not completely confident about that.

upvoted 0 times

...

Tarra

2 months ago

I think we practiced a similar question where we had to choose between different CVSS scores. If I recall correctly, the higher the score, the more urgent the remediation, right?

upvoted 0 times

...

Fanny

2 months ago

I remember we discussed how CVSS scores can really help in prioritizing vulnerabilities, but I'm not entirely sure which score is the most critical here.

upvoted 0 times

...