# CS0-001 — Question 428

**Type:** multiple_choice
**Topics:** topic_1

## Question

An organization uses Common Vulnerability Scoring System (CVSS) scores to prioritize remediation of vulnerabilities.
Management wants to modify the priorities based on a difficulty factor so that vulnerabilities with lower CVSS scores may get a higher priority if they are easier to implement with less risk to system functionality. Management also wants to quantify the priority. Which of the following would achieve management's objective?

## Correct Answer

_See scenario._

## Explanation

I don't think this one is correct. The question is "... vulnerabilities with lower CVSS scores may get a higher priority if they are easier to implement ... ". Let's assume the CVSS Score is 7 for a minute:

A. Hard: 7 * 0.1 = 0.7
 Easy: 7 * 1 = 7
B. Hard: 7 * 5 = 35
 Easy: 7 * 1 = 7
C. Hard: 7 / 1 = 7
 Easy: 7 / 10 = 0.7
D. Hard: (7 * 2) / 1 = 14
 Easy: (7 * 2) / 5 = 2.8

So, A is the only correct answer imho. Can anyone else comfirm?

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/comptia/CS0-001/428  
Practice (tracked): https://hiexam.net/study/CS0-001/practice