Chapter 1
Security Architecture
Course: Comptia Securityx Cas 005
Subject: Comptia Securityx Cas 005 Practice Exam
Chapter: Security Operations
Overview of Vulnerability Management
Vulnerability Management is a systematic process of identifying, evaluating, treating, and reporting security vulnerabilities in systems and software. It is a critical component of any cybersecurity strategy, ensuring that weaknesses are addressed before they can be exploited by threat actors.
1. Vulnerability Scans
Vulnerability scanning is the process of identifying vulnerabilities in systems, applications, and networks by using automated tools. The effectiveness of these scans depends on their configuration and methodology.
1.1 Credentialed vs. Non-Credentialed Scans
- Credentialed Scans:
Use authorized access credentials to scan systems. Provide deeper insights into vulnerabilities, such as missing patches or misconfigurations. Example: Using administrator credentials to identify unpatched software on a Windows server.
- Use authorized access credentials to scan systems.
- Provide deeper insights into vulnerabilities, such as missing patches or misconfigurations.
- Example: Using administrator credentials to identify unpatched software on a Windows server.
- Non-Credentialed Scans: