CompTIA · Security+ SY0-801
Threats and vulnerabilities
Security+ SY0-801 · Lesson 6 of 32 · 50:07
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: likelihood and impact, intelligence sources and threat feeds, identifying vulnerabilities, scoring with CVSS, and prioritizing four hundred scan findings at Ashgrove. Includes three original practice questions.
Preview the topics
- Ashgrove’s firewall automatically blocks connections to known malicious addresses, from a list that updates every hour. What provides this list?
- The scanner rates a flaw on an internal test server at 9.8, and a flaw on the internet-facing web store at 7.5, which attackers are actively exploiting. Which should the team fix first?
- A vendor advisory and Ashgrove’s scanner describe what seems to be the same flaw in the warehouse software, under different names. What should the team compare to confirm it?