ISC2 · CISSP
Security control testing
CISSP · Lesson 24 of 34 · 3:02:40
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: vulnerability assessment, penetration testing, log reviews, synthetic transactions and benchmarks, code review and testing, misuse case testing, coverage analysis, interface testing, attack simulations, and compliance checks. Includes three original practice questions.
Preview the topics
- Larkspur wants to know that its patient portal works at three in the morning, when nobody is using it. What fits?
- A tester enters a negative number of tablets in the pharmacy app, to see whether it issues a refund. What is this?
- Penetration testers receive the network diagrams and the source code of the target before they start. Which kind of test is this?