GIAC GCCC Exam - Topic 5 Question 81 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 81
Topic #: 5

[All GCCC Questions]

Which option best assigns a number indicating the severity of a discovered software vulnerability?

BCVE

DCVSS

ACPE

CCCE

Show Suggested Answer

Suggested Answer: D

by Shayne at Jan 27, 2026, 08:21 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fabiola

19 days ago

I heard some vulnerabilities get rated too high sometimes.

upvoted 0 times

...

Alpha

25 days ago

Wait, are we sure CVSS is always accurate?

upvoted 0 times

...

Kathrine

30 days ago

I think some companies use their own systems though.

upvoted 0 times

...

Merri

1 month ago

Totally agree, CVSS is the way to go!

upvoted 0 times

...

Ernest

1 month ago

CVSS scores are the standard for this.

upvoted 0 times

...

Tennie

2 months ago

Haha, the real severity is how many all-nighters the dev team has to pull to patch this thing.

upvoted 0 times

...

Emeline

2 months ago

Option D is the way to go. Detailed and objective - just how I like my vulnerability assessments.

upvoted 0 times

...

Alise

2 months ago

I'd go with Option B. Gotta keep it simple, right?

upvoted 0 times

...

Gracie

2 months ago

Option C seems the most comprehensive, covering all the key factors to consider.

upvoted 0 times

...

Glory

2 months ago

The severity of a software vulnerability should be measured in how many coffee breaks it takes to fix it.

upvoted 0 times

...

Jackie

2 months ago

I feel like the answer might involve some kind of numerical scale, but I can't remember the exact details we covered.

upvoted 0 times

...

Shayne

3 months ago

Wasn't there something about low, medium, and high severity levels? I hope I can recall the specific numbers during the exam.

upvoted 0 times

...

Hildegarde

3 months ago

I remember a practice question that asked about vulnerability ratings, and I think it was related to risk assessment.

upvoted 0 times

...

Virgie

3 months ago

I think we talked about the CVSS scoring system in class, but I'm not entirely sure how to apply it to this question.

upvoted 0 times

...

Audria

4 months ago

I've got a good handle on vulnerability assessment, so I think I'd be able to work through this step-by-step to determine the most appropriate severity rating.

upvoted 0 times

...

Annamae

4 months ago

I'm a bit unsure about this one. Maybe I'd try to brainstorm a list of criteria to consider and then see if any common vulnerability scoring models fit the bill.

upvoted 0 times

...

Doug

4 months ago

Okay, for this type of question, I'd try to apply a standardized vulnerability scoring system like CVSS to systematically evaluate the different risk factors.

upvoted 0 times

...

Halina

4 months ago

Hmm, this seems like a tricky one. I'd need to review my notes on vulnerability assessment frameworks to figure out the best approach.

upvoted 0 times

...

Callie

4 months ago

I think I'd start by considering the different factors that could contribute to the severity of a software vulnerability, like the potential impact, ease of exploitation, and availability of a fix.

upvoted 0 times

...