Jump to content

IT Security/Threats/Testing

From Wikiversity

This lesson covers security testing.

Objectives and Skills

[edit | edit source]

Objectives and skills for the security testing portion of Security+ certification include:[1]

Explain the proper use of penetration testing versus vulnerability scanning.
  • Penetration testing<ref>
    • Verify a threat exists
    • Bypass security controls
    • Actively test security controls
    • Exploiting vulnerabilities
  • Vulnerability scanning
    • Passively testing security controls
    • Identify vulnerability
    • Identify lack of security controls
    • Identify common misconfigurations
    • Intrusive vs. non-intrusive
    • Credentialed vs. non-credentialed
    • False positive
  • Black box
  • White box
  • Gray box

Readings

[edit | edit source]

Multimedia

[edit | edit source]
  1. YouTube: Penetration Testing - CompTIA Security+ SY0-401: 3.8
  2. YouTube: Vulnerability Scanning - CompTIA Security+ SY0-401: 3.8

Activities

[edit | edit source]

See Also

[edit | edit source]

References

[edit | edit source]