Examkin

Soru

Zorluk: KolayThreat Intelligence Sources and Research

A security analyst is investigating a newly reported software vulnerability and needs to review its official description, standardized Common Vulnerability Scoring System (CVSS) metrics, and vendor patch links. Which threat intelligence source is specifically designed to provide this centralized repository of public vulnerability data?

  1. National Vulnerability Database (NVD)Cevap
  2. B
    Information Sharing and Analysis Center (ISAC)
  3. C
    Dark web threat forum
  4. D
    Network firewall access control list (ACL)

Cevap

National Vulnerability Database (NVD)
The National Vulnerability Database (NVD) is a public repository maintained by NIST that integrates with the CVE dictionary to offer standardized vulnerability details, CVSS severity scores, and remediation links.

Adım Adım Çözüm

1
Identify the required data types described in the scenario.
The analyst requires standardized vulnerability descriptions, CVSS scores, and official patch references.
These attributes are characteristic of standardized public vulnerability databases.
2
Evaluate the primary role of open-source vulnerability repositories.
The National Vulnerability Database (NVD) aggregates CVE records and provides structured vulnerability scoring and technical analysis.
NVD is freely accessible and specifically designed for standardized vulnerability research.

Anahtar Kavram

Public Vulnerability Databases (NVD/CVE)
Bu soruyu puanla

Konular

Threat Intelligence Sources and Research

Bu konudan daha fazla soru