Overview
-
Use this course to help you prepare for the Security Assessment and Testing domain of the 2021 CISSP exam.
Syllabus
-
Introduction
- Security assessment and testing
- What you need to know
- Study resources
- What is vulnerability management?
- Identify scan targets
- Scan configuration
- Scan perspective
- Analyzing scan reports
- Correlating scan results
- Penetration testing
- Ethical disclosure
- Bug bounty
- Cybersecurity exercises
- Logging security information
- Security information and event management
- Code review
- Code tests
- Fuzz testing
- Interface testing
- Misuse case testing
- Test coverage analysis
- Business continuity planning
- Business continuity controls
- High availability and fault tolerance
- Disaster recovery
- Backups
- Restoring backups
- Disaster recovery sites
- Testing BC/DR plans
- After action reports
- Collect security process data
- Management review and approval
- Security metrics
- Audits and assessments
- Control management
- Continuing your preparation
