Câu 145: 312-50V13: Certified Ethical Hacker v13

During a recent vulnerability assessment of a major corporation's IT systems, the security team identified several potential risks. They want to use a vulnerability scoring system to quantify and prioritize these vulnerabilities. They decide to use the Common Vulnerability Scoring System (CVSS). Given the characteristics of the identified vulnerabilities, which of the following statements is the most accurate regarding the metric types used by CVSS to measure these vulnerabilities?

1. A. Temporal metric represents the inherent qualities of a vulnerability.
2. B. Base metric represents the inherent qualities of a vulnerability. — đáp án hiện tại
3. C. Temporal metric involves measuring vulnerabilities based on a specific environment or implementation.
4. D. Environmental metric involves the features that change during the lifetime of the vulnerability.