CompTIA · CySA+ CS0-004
Vulnerability scanning methods
CySA+ CS0-004 · Lesson 12 of 22 · 1:43:44
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CySA+ CS0-004 exam (CompTIA Cybersecurity Analyst (CySA+)). In this lesson: asset inventory and criticality, scan planning around schedules, operations, performance, sensitivity, segmentation, and regulations, internal and external, agent-based and agentless, credentialed and non-credentialed, and passive and active scans, discovery and fingerprinting, and baselines with CIS Benchmarks, PCI DSS, and the ISO 27000 series. Includes three original practice questions.
Preview the topics
- Tidewell’s scans report many vulnerabilities on Windows servers that the patch team says are already fixed, because the scanner only sees open ports and banners. What change would improve accuracy the most?
- Tidewell must have its internet-facing card payment systems scanned from the outside, by a company qualified by the PCI Security Standards Council. What does this require?
- An old check-imaging server crashed during last month’s aggressive scan, and it cannot be replaced before next year. What is the best approach for scanning it now?