Boost your confidence for the CompTIA PenTest+ Exam. Train with a quiz featuring flashcards and detailed questions, each offering hints and comprehensive explanations. Prepare thoroughly for your test!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which CVSS Attack Vector rating requires physical interaction with the target?

  1. Local (L)

  2. Physical (P)

  3. Network (N)

  4. Adjacent (A)

The correct answer is: Physical (P)

The CVSS (Common Vulnerability Scoring System) Attack Vector rating that requires physical interaction with the target is the Physical rating. This rating signifies that an attacker must have physical access to the target system or device to exploit a vulnerability. This could include scenarios such as tampering with hardware, accessing systems in a secure facility, or needing to be in close proximity to the target for successful exploitation. In contrast, the Local rating pertains to attacks that can be executed from a local account on the device, but it does not necessarily require physical presence, as these attacks can be launched remotely once access is granted. The Network rating refers to vulnerabilities that can be exploited over a network, meaning physical interaction is not needed. The Adjacent rating involves attacks where the attacker must be on the same local network as the target, but again, this may not require physical access to the device itself. Hence, the Physical Attack Vector rating is specifically designed to indicate scenarios where direct, hands-on access to the target is essential for an attacker to exploit a vulnerability effectively.