CompTIA · Security+ SY0-801
Asset and vulnerability management
Security+ SY0-801 · Lesson 20 of 32 · 3:00:17
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: the asset life cycle (acquisition, assignment, inventory, and disposal with data sanitization), identifying vulnerabilities (scans, IP address management, cloud posture management, code review, penetration tests, and bug bounties), prioritization and remediation (patching, compensating controls, and exceptions), and verification and reporting. Includes three original practice questions.
Preview the topics
- Ashgrove runs workloads in three cloud accounts, and wants a tool that continuously compares their settings to security benchmarks, and flags misconfigurations as soon as they appear. Which tool fits best?
- Ashgrove publishes rules for outside researchers, and pays a reward for every valid flaw that they report in the web store. What is this?
- The web server team says that it has installed the patch for a critical flaw, and asks for the finding to be marked as resolved. What should happen first?