CompTIA · Security+ SY0-801
Vulnerabilities and attack surfaces
Security+ SY0-801 · Lesson 10 of 32 · 1:19:47
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: systems, ports, and services, applications and code (race conditions, hardcoded secrets, and unsafe exception handling), platforms and credentials (zero-days, virtualization, and stale credentials), devices and shadow IT, and cloud and AI attack surfaces like misconfigurations. Includes three original practice questions.
Preview the topics
- A developer shares a script for the web store on a public code site, and within hours, someone signs in to the store’s database with the password written inside the script. Which vulnerability is this?
- Ashgrove’s sales team starts sharing price lists through a free file sharing app that the team signed up for on its own, without asking anyone. Which vulnerability does this create?
- Attackers steal the key that Ashgrove’s sign-in service uses to sign its tokens, and they create tokens that let them into every company application as any user. Which attack surface did they target?