Loading lesson

Audits, assessments and penetration testing

Domain 5: security program management and oversight (V7 20% · V8 14%) · Lesson 5 of 6

Lesson 5 of 6

Ask a tutor

Lesson 5 of 6 · Domain 5: security program management and oversight (V7 20% · V8 14%)

Audits, assessments and penetration testing

3 quick checks≈3% of the testCore

Reading is free. Sign in to tick off lessons, keep your place and track your mastery.

By the end you’ll be able to

Distinguish internal audits (compliance, audit committee, self-assessments), external audits (regulatory, examinations, assessments, independent third-party audits) and attestation
Compare penetration test types (physical, offensive, defensive, integrated) and environments (known, partially known, unknown)
Distinguish passive and active reconnaissance and give examples of each

0% read

Use MITRE ATT&CK, the Cyber Kill Chain and the Diamond Model of Intrusion Analysis to structure assessment findings (SY0-801)

This lesson hasn’t been written yet

Security+ lessons are written from the official syllabus the first time a learner opens them, then saved for everyone. Sign in and this one is written for you in a minute or two. It’s free.

Sign in Create a free account