CompTIA · Security+ SY0-801
Audits and assessments
Security+ SY0-801 · Lesson 31 of 32 · 4:47:04
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: data gathering (sampling, questionnaires, and interviews), scoping and engagement types (audit charter, gap analysis, internal and external audits, and self-assessments), penetration testing in known, unknown, and partially known environments, and frameworks like ISO 27001, ATT&CK, the Cyber Kill Chain, and the Diamond Model. Includes three original practice questions.
Preview the topics
- An auditor wants to confirm that departing employees lose their access within one day. Ashgrove had 400 departures last year, and the auditor tests 25 of them. What is this technique called?
- Before the test begins, Ashgrove gives a testing firm network diagrams, the source code of the web store, and administrator accounts. What kind of test is this?
- Ashgrove’s attack team runs one technique at a time, while the monitoring team watches its alerts, and both teams improve the detections together. What kind of testing is this?