CompTIA PenTest+ Practice Test

What does an 'Adjacent' CVSS Attack Vector rating indicate?

1. The attacker must be on the same physical or logical network

2. The attacker can exploit remotely over the internet

3. The attacker requires local access to the machine

4. The adversary must physically interact with the target

The correct answer is: The attacker must be on the same physical or logical network

An 'Adjacent' CVSS Attack Vector rating indicates that the attacker must be on the same physical or logical network as the target. This means that for an attacker to exploit a vulnerability classified under this category, they don’t require direct access to the target system itself; rather, they need to be part of the same network segment or have logical access that allows them to interact with devices on the same network. This classification is important in understanding the risk associated with the vulnerability because it implies a level of proximity or access that can be exploited. Adjacency suggests that there are certain network boundaries that need to be overcome, yet the attacker’s position still holds a fair amount of potential access compared to remote conditions. The other classifications, such as 'Remote' or 'Local', describe different levels of access that attackers might have. Remote access implies exploitation can occur over the internet, while local access means that the attacker must have physical access to the machine. 'Adjacent' sits in between these two, emphasizing the need for network proximity rather than physical access.