Which source of threat modeling data is most likely to contain the Common Vulnerability Scoring System (CVSS) score for a known software vulnerability?

Security information and event management (SIEM) logs

F5Certified Solution Expert, Security

Domain 1Objective 2

1.02 Analyze Threat Modeling Data to Determine Risk Profiles of the Infrastructure and Applications 401 Practice Questions (Page 5)

Part of the THREAT ANALYSIS domain, which makes up ~11% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~4–8 in this domain), expect 2–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

6concepts

Questions 21–22

21foundation · easy
Which source of threat modeling data is most likely to contain the Common Vulnerability Scoring System (CVSS) score for a known software vulnerability?
Select an answer first
22foundation · easy
Which infrastructure component's risk profile is most likely to be affected by the presence of unpatched vulnerabilities in its firmware?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

1.02 Analyze Threat Modeling Data to Determine Risk Profiles of the Infrastructure and Applications 401 Practice Questions (Page 5)

Questions 21–22

Which source of threat modeling data is most likely to contain the Common Vulnerability Scoring System (CVSS) score for a known software vulnerability?

Which infrastructure component's risk profile is most likely to be affected by the presence of unpatched vulnerabilities in its firmware?

Keep studying — THREAT ANALYSIS