Vulnerability Prioritization Scenarios

Summary

'You have 20 vulnerabilities and limited time, how do you prioritize?' — testing risk-based judgment from Phase 11, not just CVSS score memorization.

• 1Practice prioritizing a sample list of vulnerabilities by severity, exploitability, and business impact.
• 2Prepare to explain why a high CVSS score alone doesn't always mean top priority.
• 3Practice justifying your prioritization reasoning, not just stating a final ranked list.