Chapter 1
Cloud Architecture
Course: Comptia Cloud Cv0 004
Subject: Comptia Cloud Cv0004
Chapter: Security
Vulnerability management is a proactive, continuous process used to identify, classify, remediate, and mitigate security vulnerabilities across systems, networks, and applications. It is essential for reducing attack surfaces and maintaining a strong security posture.
1 Steps in Vulnerability Management
1. Scanning Scope
Definition:
The process of defining the breadth and boundaries of the vulnerability scan — what assets will be scanned, when, how often, and under what conditions. This foundational step ensures comprehensive coverage without disrupting business operations.
Key Considerations:
- Comprehensive Asset Inclusion:
Include critical infrastructure such as production servers, firewalls, VPN gateways, cloud storage, APIs, and container orchestration platforms (e.g., Kubernetes).
Do not exclude non-traditional assets such as IoT devices, mobile endpoints, and shadow IT resources.
- Include critical infrastructure such as production servers, firewalls, VPN gateways, cloud storage, APIs, and container orchestration platforms (e.g., Kubernetes).
- Do not exclude non-traditional assets such as IoT devices, mobile endpoints, and shadow IT resources.
- Internal vs. External Assets: