CompTIA · CySA+ CS0-004
Mitigating vulnerabilities
CySA+ CS0-004 · Lesson 15 of 22 · 2:06:04
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CySA+ CS0-004 exam (CompTIA Cybersecurity Analyst (CySA+)). In this lesson: attack surface management, secure coding with input validation, output encoding, and parameterized queries, patch management and configuration management, exceptions and compensating controls, and validation of every fix. Includes three original practice questions.
Preview the topics
- A SQL injection fixed last year comes back in a new feature of the loan application, because a developer built a query by joining user input to the SQL text. Which practice prevents this class of flaw?
- The vendor’s patch for the loan application breaks a regulatory report, and cannot be applied for three months. What is the best course of action?
- The server team reports that a critical vulnerability was patched on all twelve web servers, and asks to close the ticket. What should the analyst do before closing it?