Which of the following are valid reasons for including base, temporal, and environmental CVSS metrics...

[Reference: CompTIA PenTest+ PT0-003 Official Study Guide - "Risk Prioritization in Reporting", Providing information on attack complexity and vector (Option D):, CVSS Base scores define attack complexity (e.g., low vs. high) and attack vector (e.g., network vs. physical)., This helps security teams understand how a vulnerability can be exploited., Reference: CompTIA PenTest+ PT0-003 Official Study Guide - "CVSS Metrics in Vulnerability Assessment", Incorrect options:, Option A (Providing remediation details): CVSS does not include remediation steps; it only scores severity., Option C (Proof-of-concept exploit links): CVSS scores are not based on specific exploits., Option E (Compliance information): CVSS focuses on technical risk, not regulatory compliance., Option F (Adding risk levels to assets): CVSS evaluates individual vulnerabilities, not asset risk classification., , ]