Week 6-4

Question 1

Environmental Metrics: List the possible values for all environmental CIA requirement metrics (CR, IR, AR)

Answer 1

• Not Defined (X)
• High (H)
• Low (L)
• None (N)

Question 2

Environmental Metrics: T/F - The possible values of the exploitability metrics differ from those of the impact metrics

Answer 2

False. They are the same.

Question 3

Threat Metrics: List the possible values for Exploit Maturity (E)

Answer 3

• Not Defined (X)
• Attacked (A)
• Proof-of-Concept (P)
• Unreported (U)

Question 4

Supplemental Metrics (Optional): List the possible values for Safety (S)

Answer 4

• Not Defined (X)
• Negligible (N)
• Present (P)

Question 5

Supplemental Metrics (Optional): List the possible values for Automatable (AU)

Answer 5

• Not Defined (X)
• No (N)
• Yes (Y)

Question 6

Supplemental Metrics (Optional): List the possible values for Value Density (V)

Answer 6

• Not Defined (X)
• Diffuse (D)
• Concentrated (C)

Question 7

Supplemental Metrics (Optional): List the possible values for Provider Urgency (U)

Answer 7

• Not Defined (X)
• Clear
• Green
• Amber
• Red

Question 8

Supplemental Metrics (Optional): List the possible values for Recovery (R)

Answer 8

• Not Defined (X)
• Automatic (A)
• User (U)
• Irrecoverable (I)

Question 9

Supplemental Metrics (Optional): List the possible values for Vulnerability Response Effort (RE)

Answer 9

• Not Defined (X)
• Low (L)
• Moderate (M)
• High (H)