Analyzing Vulnerabilities

Question 1

False positive

Answer 1

-a vulnerability is identified that doesn’t exist

Question 2

False negative

Answer 2

A vulnerability exists, but not detected

Question 3

CVSS (common vulnerability scoring system)

Answer 3

is a standardized framework used to assess the severity of security vulnerabilities in software and hardware. It provides a way to quantify the characteristics and impact of vulnerabilities, allowing organizations to prioritize their responses based on risk

Question 4

CVE (common vulnerabilities and exposures)

Answer 4

is a standardized system for identifying and cataloging publicly known cybersecurity vulnerabilities. It serves as a reference method for publicly known information security vulnerabilities and exposures