CompTIA CySA+ Study Guide, 3rd Edition

Chapter 6Designing a Vulnerability Management Program

THE COMPTIA CYBERSECURITY ANALYST (CYSA+) EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain 2.0: Vulnerability Management
  • 2.1 Given a scenario, implement vulnerability scanning methods and concepts
    • Special considerations
    • Internal vs. external scanning
    • Agent vs. agentless
    • Credentialed vs. non-credentialed
    • Passive vs. active
    • Security baseline scanning
    • Industry frameworks
  • 2.2 Given a scenario, analyze output from vulnerability assessment tools
    • Web application scanners
    • Vulnerability scanners
    • Cloud infrastructure assessment tools

Cybersecurity is a cat-and-mouse game where information technology professionals seek to combat the new vulnerabilities discovered by adversaries ...