Discuss GIAC GCCC Exam Topic 5 Question 81

Which option best assigns a number indicating the severity of a discovered software vulnerability?

BCVE

DCVSS

ACPE

CCCE

Suggested Answer: D

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Jeff 3 months ago

True, but it gives a clear picture of risk levels.

Jody 3 months ago

But it can be complex to understand for beginners.

Veronica 3 months ago

Agreed! It’s standardized and widely accepted.

Viva 4 months ago

I think the CVSS score is the best way to rate severity.

Fabiola 5 months ago

I heard some vulnerabilities get rated too high sometimes.

Alpha 5 months ago

Wait, are we sure CVSS is always accurate?

Kathrine 5 months ago

I think some companies use their own systems though.

Merri 6 months ago

Totally agree, CVSS is the way to go!

Ernest 6 months ago

CVSS scores are the standard for this.

Tennie 6 months ago

Haha, the real severity is how many all-nighters the dev team has to pull to patch this thing.

Emeline 6 months ago

Option D is the way to go. Detailed and objective - just how I like my vulnerability assessments.

Alise 6 months ago

I'd go with Option B. Gotta keep it simple, right?

Gracie 6 months ago

Option C seems the most comprehensive, covering all the key factors to consider.

Glory 7 months ago

The severity of a software vulnerability should be measured in how many coffee breaks it takes to fix it.

Jackie 7 months ago

I feel like the answer might involve some kind of numerical scale, but I can't remember the exact details we covered.

Shayne 7 months ago

Wasn't there something about low, medium, and high severity levels? I hope I can recall the specific numbers during the exam.

Hildegarde 8 months ago

I remember a practice question that asked about vulnerability ratings, and I think it was related to risk assessment.

Virgie 8 months ago

I think we talked about the CVSS scoring system in class, but I'm not entirely sure how to apply it to this question.

Audria 8 months ago

I've got a good handle on vulnerability assessment, so I think I'd be able to work through this step-by-step to determine the most appropriate severity rating.

Annamae 8 months ago

I'm a bit unsure about this one. Maybe I'd try to brainstorm a list of criteria to consider and then see if any common vulnerability scoring models fit the bill.

Doug 8 months ago

Okay, for this type of question, I'd try to apply a standardized vulnerability scoring system like CVSS to systematically evaluate the different risk factors.

Halina 9 months ago

Hmm, this seems like a tricky one. I'd need to review my notes on vulnerability assessment frameworks to figure out the best approach.

Callie 9 months ago

I think I'd start by considering the different factors that could contribute to the severity of a software vulnerability, like the potential impact, ease of exploitation, and availability of a fix.

Jillian 2 months ago

↳ replying to Callie

And what about the fix availability? That’s key!

Barney 3 months ago

↳ replying to Callie

Definitely! Exploitability matters too.

Dallas 3 months ago

↳ replying to Callie

I agree, impact is crucial.

GIAC GCCC Exam - Topic 5 Question 81 Discussion