What are resources of National Vulnerability Database (NVD)?

• A. CPE, CVE, OVAL
• B. CPE, CVE
• C. CVE, OVAL
• D. TLS, SSH keys

Answer: (A)

The National Vulnerability Database provides standardized, machine-readable data that supports vulnerability management: CVE entries, a CPE product naming dictionary, and OVAL content. CVE gives the unique identifiers and descriptions for publicly disclosed vulnerabilities, forming the core catalog. CPE provides a consistent way to name and map affected products, so you can reliably link a vulnerability to specific hardware or software. OVAL supplies a formal language for expressing system checks and vulnerability definitions, enabling automated assessment by security tools. TLS keys and SSH keys aren’t resources of the NVD; they’re security mechanisms and credentials, not part of the NVD’s vulnerability data resources. Therefore, the combination of CVE, CPE, and OVAL best represents the NVD resources.