It indicates the flaw is more easily exploited and more severe is the correct option.

This option is correct because the Common Vulnerability Scoring System produces a numerical score that reflects both how exploitable a vulnerability is and the potential impact on confidentiality integrity and availability. A higher CVSS rating therefore signals greater exploitability and more severe potential consequences which helps organizations prioritize remediation.

Cloud Security Command Center is incorrect because that is a Google Cloud security management service and it does not define what a CVSS rating means.

It means the vulnerability is harder to attack is incorrect because a higher CVSS score indicates the opposite. A higher score denotes easier exploitation or greater impact not increased difficulty.

It signals the issue is less likely to be discovered by scanners is incorrect because CVSS measures severity and exploitability rather than the likelihood of discovery by scanning tools.

Full AWS Practitioner Certification Question