Which component of the Security Content Automation Protocol (SCAP) specification contains the data required to estimate the severity of vulnerabilities identified automated vulnerability assessments?

exams CISSP CISSP exam 0 Comments

Which component of the Security Content Automation Protocol (SCAP) specification contains the data required to estimate the severity of vulnerabilities identified automated vulnerability assessments?
A . Common Vulnerabilities and Exposures (CVE)
B . Common Vulnerability Scoring System (CVSS)
C . Asset Reporting Format (ARF)
D . Open Vulnerability and Assessment Language (OVAL)

Answer: B