CompTIA Security+ SY0-701 Cert Guide

Chapter 27

Understanding Types and Purposes of Audits and Assessments

This chapter covers the following topics related to Objective 5.5 (Explain types and purposes of audits and assessments) of the CompTIA Security+ SY0-701 certification exam:

• Attestation

• Internal

• External

• Penetration testing

This chapter looks at audits and assessments in cybersecurity, starting with the foundational role of attestation. It breaks down internal and external audits, detailing the importance of compliance checks and third-party evaluations. The chapter also covers the spectrum of penetration testing, from physical to integrated approaches, including a look at different testing environments and reconnaissance techniques.

“Do I Know This Already?” Quiz

The “Do ...