CS0-003 Vulnerability Management Practice Question
A security team is scanning container images with Trivy and finds a vulnerability with CVSS v3.1 vector AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H. The vulnerability exists in a container running as a privileged container on a Kubernetes cluster. The team is prioritizing based on risk. Given the CVSS vector, which factor most significantly reduces the likelihood of exploitation in this context?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Attack Vector: Local
AV:L (Local) means the attacker must have local access to exploit. AC:H (High) and PR:H (High) are also limiting, but the attack vector being local means remote exploitation is not possible, which is a strong limiting factor. However, the question asks 'most significantly reduces the likelihood'. While local access is limiting, Attack Complexity High also reduces likelihood. But AV:L is more significant because it restricts the attack source. In the context of a container, local access might be more achievable, but still the vector shows it's not remotely exploitable. The best answer is Attack Vector: Local.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Attack Vector: Local
Why this is correct
An Attack Vector of Local (AV:L) significantly reduces the exploitability score because the attacker cannot exploit the vulnerability over the network. They must already possess local shell access, console access, or the ability to execute code locally on the container or host, creating a major barrier to entry compared to Network-based attacks.
- ✗
Privileges Required: High
Why it's wrong here
While requiring High Privileges (PR:H) does lower the CVSS exploitability subscore, it is not the primary limiting factor in this context. An attacker must first establish a local presence (Attack Vector: Local) before administrative or root-level privileges within the container environment even become a relevant constraint for exploitation.
- ✗
Attack Complexity: High
Why it's wrong here
High Attack Complexity (AC:H) indicates that the exploit relies on specific, uncontrollable environmental conditions or precise timing windows. However, this is a secondary operational hurdle; the fundamental architectural boundary is the requirement for local access, which completely rules out remote, opportunistic exploitation.
- ✗
User Interaction: None
Why it's wrong here
A metric of User Interaction: None (UI:N) means the vulnerability can be exploited without any victim cooperation, such as clicking a link or opening a file. This actually increases the exploitability score and overall risk of the vulnerability, making it a poor choice for a factor that reduces the likelihood of exploitation.
Go deeper
Related to this question
Learn chapter
Privileged Access Management and PAM Tools
Key term
Exploit
An exploit is a piece of code, a sequence of commands, or a technique that takes advantage of a vulnerability in a system or software to cause unintended behavior, often for malicious purposes.
Key term
Exploitation
Exploitation is the act of using a vulnerability or weakness in a system, network, or application to gain unauthorized access, cause damage, or extract data.
About these practice questions
One of 701 original CS0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CS0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CS0-004 exam.