CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 6

Vulnerabilities

This chapter covers the following official Security+ exam objective:

• ▶ 1.6 Explain the security concerns associated with various types of vulnerabilities.

Essential Terms and Components

• ▶ cloud-based vs. on-premises

• ▶ zero-day attack

• ▶ weak configuration

• ▶ third-party risk

• ▶ patch management

• ▶ impact

Vulnerability scanners are capable of prioritizing vulnerabilities based on accepted criteria that reflect the severity of various weaknesses. However, each organization is unique and has varying degrees of resources to fix vulnerabilities. Keep in mind that the mere act of patching a vulnerability introduces risk because the application of the patch might negatively affect the systems. Furthermore, most organizations ...