Skip to content
CIS-VR
Getting Data into Vulnerability Response
medium
Question 2 of 50

Which description of built-in severity mapping is correct?

AOnly third-party scanners provide severity mapping.
BServiceNow ships NVD-to-normalized-ServiceNow severity mapping, and supported integrations install their own mappings that can be adjusted.
CSeverity mapping is fixed and cannot be changed for non-standard cases.
DSeverity mapping happens only after approvals.

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion