Loading lesson

OS, hardware, virtualization, cloud and mobile vulnerabilities

Domain 2: threats, vulnerabilities, and mitigations (V7 22%) / attacks (V8 24%) · Lesson 5 of 8

Lesson 5 of 8

Ask a tutor

Lesson 5 of 8 · Domain 2: threats, vulnerabilities, and mitigations (V7 22%) / attacks (V8 24%)

OS, hardware, virtualization, cloud and mobile vulnerabilities

3 quick checks≈3% of the testCore

Reading is free. Sign in to tick off lessons, keep your place and track your mastery.

By the end you’ll be able to

Explain OS-based, firmware, end-of-life, legacy, unsupported, unpatched, obsolete and unmanaged system vulnerabilities
Describe virtualization vulnerabilities (VM escape, resource reuse) and cloud-specific risks such as publicly exposed object storage and public code repositories
Identify mobile device vulnerabilities: sideloading, jailbreaking/rooting and unmanaged devices

0% read

Network, cryptographic and credential attacks1 h 10 min of study

AI and LLM threats and vulnerabilities (SY0-801)55 min of study

Explain zero-day, cryptographic and misconfiguration vulnerabilities, and the risk from stale credentials, rogue devices, shadow IT and identity providers

Identify supply chain vulnerabilities in service, hardware and software providers, and weaknesses in wireless and low-powered communications

This lesson hasn’t been written yet

Security+ lessons are written from the official syllabus the first time a learner opens them, then saved for everyone. Sign in and this one is written for you in a minute or two. It’s free.

Sign in Create a free account