CompTIA · CySA+ CS0-004
Controls, risk, and application security
CySA+ CS0-004 · Lesson 16 of 22 · 2:12:48
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CySA+ CS0-004 exam (CompTIA Cybersecurity Analyst (CySA+)). In this lesson: administrative, technical, and physical controls, preventive, detective, responsive, and corrective functions, inherent and residual risk, risk appetite and the choice to accept, transfer, avoid, or mitigate, policies, governance, and service-level objectives, SAST, DAST, and OWASP SAMM, and third-party risk with SCA, SBOMs, and vendor assessments. Includes three original practice questions.
Preview the topics
- Tidewell decides to stop offering an old file transfer service to business members, because securing it would cost more than the service earns. Which risk strategy is this?
- The developers want a test that runs in the build pipeline, analyzes the source code of the mobile app without running it, and points to the exact line of each flaw. Which testing type fits?
- A critical vulnerability is published in a popular open-source logging library, and the CISO asks which purchased applications contain it. What makes this question quick to answer?