CHAPTER 7

Security Assessments

In this chapter, you will

•   Learn about threat hunting

•   Examine the details of vulnerability scans

•   Explore syslog/SIEM/SOAR technologies

Assessment is the examination of something against a standard, to see how it stacks up. In security, the primary standard should be your set of security policies—and they should align with any external requirements. So how do you examine your systems to see if things are really working in the manner you desire? This chapter will explore several aspects of doing assessments. One of the major methods of performing security assessments is through the use of penetration tests, and these tests are covered in Chapter 8, “Penetration Testing.”

Certification Objective  This ...

Get CompTIA Security+ All-in-One Exam Guide, Sixth Edition (Exam SY0-601)), 6th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.