Examkin

Question

Difficulty: EasyThreat Intelligence Sources and Research

A security analyst is investigating a newly reported software vulnerability and needs to review its official description, standardized Common Vulnerability Scoring System (CVSS) metrics, and vendor patch links. Which threat intelligence source is specifically designed to provide this centralized repository of public vulnerability data?

  1. National Vulnerability Database (NVD)Answer
  2. B
    Information Sharing and Analysis Center (ISAC)
  3. C
    Dark web threat forum
  4. D
    Network firewall access control list (ACL)

Answer

National Vulnerability Database (NVD)
The National Vulnerability Database (NVD) is a public repository maintained by NIST that integrates with the CVE dictionary to offer standardized vulnerability details, CVSS severity scores, and remediation links.

Step-by-Step Solution

1
Identify the required data types described in the scenario.
The analyst requires standardized vulnerability descriptions, CVSS scores, and official patch references.
These attributes are characteristic of standardized public vulnerability databases.
2
Evaluate the primary role of open-source vulnerability repositories.
The National Vulnerability Database (NVD) aggregates CVE records and provides structured vulnerability scoring and technical analysis.
NVD is freely accessible and specifically designed for standardized vulnerability research.

Key Concept

Public Vulnerability Databases (NVD/CVE)
Rate this question

Topics

Threat Intelligence Sources and Research

More questions from this topic